<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <meta name="generator" content="HTML Tidy, see www.w3.org">
    <title>FreeBSD/i386 5.0-DP1 Release Notes</title>
    <meta name="GENERATOR" content=
    "Modular DocBook HTML Stylesheet Version 1.73 ">
    <link rel="STYLESHEET" type="text/css" href="docbook.css">
  </head>

  <body class="ARTICLE" bgcolor="#FFFFFF" text="#000000" link=
  "#0000FF" vlink="#840084" alink="#0000FF">
    <div class="ARTICLE">
      <div class="TITLEPAGE">
        <h1 class="TITLE"><a name="AEN2">FreeBSD/i386 5.0-DP1
        Release Notes</a></h1>

        <h3 class="CORPAUTHOR">The FreeBSD Project</h3>

        <p class="COPYRIGHT">Copyright &copy; 2000, 2001, 2002 by
        The FreeBSD Documentation Project</p>

        <p class="PUBDATE">$FreeBSD:
        src/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml,v
        1.299 2002/03/13 05:41:41 bmah Exp $<br>
        </p>

        <div>
          <div class="ABSTRACT">
            <a name="AEN11"></a>

            <p>The release notes for FreeBSD 5.0-DP1 contain a
            summary of the changes made in the FreeBSD base system
            since 4.0-RELEASE. Both changes for kernel and userland
            are listed, as well as applicable security advisories
            that were issued since the last release. Some brief
            remarks on upgrading are also presented.</p>
          </div>
        </div>
        <hr>
      </div>

      <div class="TOC">
        <dl>
          <dt><b>Table of Contents</b></dt>

          <dt>1 <a href="#AEN13">Introduction</a></dt>

          <dt>2 <a href="#AEN18">What's New</a></dt>

          <dd>
            <dl>
              <dt>2.1 <a href="#KERNEL">Kernel Changes</a></dt>

              <dd>
                <dl>
                  <dt>2.1.1 <a href="#AEN276">Processor/Motherboard
                  Support</a></dt>

                  <dt>2.1.2 <a href="#AEN305">Bootloader
                  Changes</a></dt>

                  <dt>2.1.3 <a href="#AEN324">Network Interface
                  Support</a></dt>

                  <dt>2.1.4 <a href="#AEN553">Network
                  Protocols</a></dt>

                  <dt>2.1.5 <a href="#AEN678">Disks and
                  Storage</a></dt>

                  <dt>2.1.6 <a href="#AEN815">Filesystems</a></dt>

                  <dt>2.1.7 <a href="#AEN890">PCCARD
                  Support</a></dt>

                  <dt>2.1.8 <a href="#AEN911">Multimedia
                  Support</a></dt>

                  <dt>2.1.9 <a href="#AEN935">Contributed
                  Software</a></dt>
                </dl>
              </dd>

              <dt>2.2 <a href="#SECURITY">Security-Related
              Changes</a></dt>

              <dt>2.3 <a href="#USERLAND">Userland Changes</a></dt>

              <dd>
                <dl>
                  <dt>2.3.1 <a href="#AEN2627">Contributed
                  Software</a></dt>

                  <dt>2.3.2 <a href="#AEN2998">Ports/Packages
                  Collection</a></dt>
                </dl>
              </dd>
            </dl>
          </dd>

          <dt>3 <a href="#AEN3091">Upgrading from previous releases
          of FreeBSD</a></dt>
        </dl>
      </div>

      <div class="SECT1">
        <hr>

        <h1 class="SECT1"><a name="AEN13">1 Introduction</a></h1>

        <p>This document contains the release notes for FreeBSD
        5.0-DP1 on the IA-32 hardware platform. It describes new
        features of FreeBSD that have been added (or changed) since
        4.0-RELEASE. It also provides some notes on upgrading from
        previous versions of FreeBSD.</p>

        <p>The snapshot distribution to which these release notes
        apply represents a point along the 5-CURRENT development
        branch between 4.0-RELEASE and the future 5.0-RELEASE. Some
        pre-built, binary snapshot distributions along this branch
        can be found at <a href=
        "ftp://current.FreeBSD.org/pub/FreeBSD/" target=
        "_top">ftp://current.FreeBSD.org/pub/FreeBSD/</a>.</p>
      </div>

      <div class="SECT1">
        <hr>

        <h1 class="SECT1"><a name="AEN18">2 What's New</a></h1>

        <p>This section describes the most user-visible new or
        changed features in FreeBSD since 4.0-RELEASE. Typical
        release note items document new drivers or hardware
        support, new commands or options, major bugfixes, or
        contributed software upgrades. Security advisories issued
        after 4.0-RELEASE are also listed. In general, changes
        described here are unique to the 5-CURRENT branch unless
        specifically marked as [MERGED] features.</p>

        <p>Many additional changes were made to FreeBSD that are
        not listed here for lack of space. For example,
        documentation was corrected and improved, minor bugs were
        fixed, insecure coding practices were audited and
        corrected, and source code was cleaned up.</p>

        <div class="SECT2">
          <hr>

          <h2 class="SECT2"><a name="KERNEL">2.1 Kernel
          Changes</a></h2>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=amdpm&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">amdpm</span>(4)</span></a> driver has
          been added to provide access to the system monitoring
          functions of the AMD 756 chipset. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=agp&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">agp</span>(4)</span></a> driver for AGP
          devices has been added. [MERGED]</p>

          <p>A new <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ddb&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ddb</span>(4)</span></a> command <tt
          class="COMMAND">show pcpu</tt> lists some of the per-CPU
          data.</p>

          <p>Two new <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ddb&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ddb</span>(4)</span></a> commands, <tt
          class="COMMAND">hwatch</tt> and <tt class=
          "COMMAND">dhwatch</tt>, have been introduced. Analogous
          to <tt class="COMMAND">watch</tt> and <tt class=
          "COMMAND">dwatch</tt>, they install hardware watchpoints
          (as opposed to software watchpoints) if supported by the
          architecture. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=devfs&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">devfs</span>(5)</span></a>, which allows
          entries in the <tt class="FILENAME">/dev</tt> directory
          to be built automatically and supports more flexible
          attachment of devices, has been largely reworked. <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=devfs&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">devfs</span>(5)</span></a> is now enabled
          by default and can be disabled by the <tt class=
          "LITERAL">NODEVFS</tt> kernel option.</p>

          <p>The dgm driver has been removed in favor of the digi
          driver.</p>

          <p>A new digi driver has been added to support PCI
          Xr-based and ISA Xem Digiboard cards. A new <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=digictl&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">digictl</span>(8)</span></a> program is
          (mainly) used to re-initialize cards that have external
          port modules attached such as the PC/Xem.</p>

          <p>An <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=eaccess&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">eaccess</span>(2)</span></a> system call
          has been added, similar to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=access&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">access</span>(2)</span></a> except that
          the former uses effective credentials rather than real
          credentials.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ichsmb&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ichsmb</span>(4)</span></a> driver for
          the Intel 82801AA (ICH) SMBus controller and compatibles
          has been added. [MERGED]</p>

          <p>Each <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=jail&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">jail</span>(2)</span></a> environment can
          now run under its own securelevel.</p>

          <p>The tunable sysctl variables for <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=jail&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">jail</span>(2)</span></a> have moved from
          <tt class="VARNAME">jail.*</tt> to the <tt class=
          "VARNAME">security.*</tt> hierarchy. Other
          security-related sysctl variables have moved from <tt
          class="VARNAME">kern.security.*</tt> to <tt class=
          "VARNAME">security.*</tt>.</p>

          <p>The <tt class="VARNAME">kern.maxvnodes</tt> limit now
          properly limits the number of vnodes in use. Previously
          only vnodes with no cached pages could be freed; this
          could allow the number of vnodes to grow without limit on
          large-memory machines accessing many small files. A <tt
          class="LITERAL">vnlru</tt> kernel thread helps to flush
          and reuse vnodes. [MERGED]</p>

          <p>The kernel message buffer is now accessible by the
          (machine-independent) <tt class=
          "VARNAME">kern.msgbuf</tt> sysctl variable; <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dmesg&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dmesg</span>(8)</span></a> no longer
          needs to be SGID <tt class="GROUPNAME">kmem</tt>.
          [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=kqueue&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">kqueue</span>(2)</span></a> event
          notification facility was added to the FreeBSD kernel.
          This is a new interface which is able to replace <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=poll&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">poll</span>(2)</span></a>/<a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=select&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">select</span>(2)</span></a>, offering
          improved performance, as well as the ability to report
          many different types of events. Support for monitoring
          changes in sockets, pipes, fifos, and files are present,
          as well as for signals and processes. [MERGED]</p>

          <p>A new <tt class="VARNAME">KVA_SPACE</tt> kernel option
          can be used to reconfigure the size of the kernel virtual
          address space. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=labpc&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">labpc</span>(4)</span></a> driver has
          been removed due to ``bitrot''.</p>

          <p>The loader and kernel linker now look for files named
          <tt class="FILENAME">linker.hints</tt> in each directory
          with KLDs for a module name and version to KLD filename
          mapping. The new <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=kldxref&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">kldxref</span>(8)</span></a> utility is
          used to generate these files.</p>

          <p>Linux emulation now supports the kernel functionality
          required by the <a href=
          "http://www.FreeBSD.org/cgi/url.cgi?ports/emulators/linux_base-7/pkg-descr">
          <tt class="FILENAME">emulators/linux_base-7</tt></a>
          (RedHat 7.X emulation) port. [MERGED]</p>

          <p>Linux emulation now requires <tt class=
          "LITERAL">options SYSVSEM</tt> in the kernel
          configuration. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lomac&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lomac</span>(4)</span></a>, a
          Low-Watermark Mandatory Access Control security facility,
          has been added as a kernel module. It provides a drop-in
          security mechanism in addition to the traditional
          UID-based security facilities, requiring no additional
          configuration from the administrator. Work on this
          feature was sponsored by DARPA and NAI Labs.</p>

          <p>The <tt class="VARNAME">maxusers</tt> kernel
          configuration parameter is now a boot-time tunable
          variable. The kernel parameters derived from <tt class=
          "VARNAME">maxusers</tt> are now also tunables and can be
          overridden at boot-time. The <tt class="VARNAME">hz</tt>
          parameter is also now a tunable. [MERGED]</p>

          <p>Specifying a value of <tt class="LITERAL">0</tt> for
          the <tt class="VARNAME">maxusers</tt> kernel
          configuration parameter will now cause an appropriate
          value to be calculated at boot-time (between 32 and 384,
          depending on the amount of memory present). This value is
          now the default for all <tt class="FILENAME">GENERIC</tt>
          kernels. [MERGED]</p>

          <p>The kernel configuration parameters <tt class=
          "VARNAME">MAXTSIZ</tt>, <tt class="VARNAME">DFLDSIZ</tt>,
          <tt class="VARNAME">MAXDSIZ</tt>, <tt class=
          "VARNAME">DFLSSIZ</tt>, <tt class="VARNAME">MAXSSIZ</tt>,
          and <tt class="VARNAME">SGROWSIZ</tt> are all loader
          tunables (<tt class="VARNAME">kern.maxtsiz</tt>, <tt
          class="VARNAME">kern.maxdfldsiz</tt>, etc.). [MERGED]</p>

          <p>The <tt class="LITERAL">NCPU</tt>, <tt class=
          "LITERAL">NAPIC</tt>, <tt class="LITERAL">NBUS</tt>, and
          <tt class="LITERAL">NINTR</tt> kernel configuration
          options, for configuring SMP kernels, have been removed.
          <tt class="LITERAL">NCPU</tt> is now set to a maximum of
          16, and the other, aforementioned options are now
          dynamic. [MERGED]</p>

          <p>A <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=nmdm&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">nmdm</span>(4)</span></a> null-modem
          terminal driver has been added. [MERGED]</p>

          <p>The <tt class="LITERAL">O_DIRECT</tt> flag has been
          added to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=open&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">open</span>(2)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fcntl&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fcntl</span>(2)</span></a>. Specifying
          this flag for open files will attempt to minimize the
          cache effects of reading and writing. [MERGED]</p>

          <p>An <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=orm&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">orm</span>(4)</span></a> device has been
          added to claim the option ROMs in the ISA memory I/O
          space, to prevent other drivers from mistakenly assigning
          addresses that conflict with these ROMs. [MERGED]</p>

          <p>PECOFF (Win32 Execution file format) support has been
          added.</p>

          <p>The pmc driver, which supports the power management
          controller of the NEC PC-98NOTE, has been added.
          [MERGED]</p>

          <p>POSIX.1b Shared Memory Objects are now supported. The
          implementation uses regular files, but automatically
          enables the MAP_NOSYNC flag when they are <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mmap&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mmap</span>(2)</span></a>-ed.
          [MERGED]</p>

          <p>Replaced the <tt class="LITERAL">PQ_*CACHE</tt>
          options with a single <tt class=
          "LITERAL">PQ_CACHESIZE</tt> option to be set to the cache
          size in kilobytes. The old options are still supported
          for backwards compatibility. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=puc&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">puc</span>(4)</span></a> (PCI
          ``Universal'' Communications) driver has been added, to
          help connect PCI-based serial ports to the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sio&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sio</span>(4)</span></a> driver.
          [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=random&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">random</span>(4)</span></a> device has
          been rewritten to use the <b class=
          "APPLICATION">Yarrow</b> algorithm. It harvests entropy
          from a variety of interrupt sources, including the
          console devices, Ethernet and point-to-point network
          interfaces, and mass-storage devices. Entropy from the <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=random&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">random</span>(4)</span></a> device is now
          periodically saved to files in <tt class=
          "FILENAME">/var/db/entropy</tt>, as well as at shutdown
          time. The semantics of <tt class=
          "FILENAME">/dev/random</tt> have changed; it never blocks
          waiting for entropy bits but generates a stream of
          pseudo-random data and now behaves exactly as <tt class=
          "FILENAME">/dev/urandom</tt>.</p>

          <p>A new kernel option, <tt class="LITERAL">options
          REGRESSION</tt>, enables interfaces and functionality
          intended for use during correctness and regression
          testing.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=snp&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">snp</span>(4)</span></a> device is no
          longer static and can now be compiled as a module.
          [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=spic&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">spic</span>(4)</span></a> driver, which
          provides access to the jog dial device on some Sony
          laptops, has been added.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syscons&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syscons</span>(4)</span></a> driver now
          supports keyboard-controlled pasting, by default bound to
          <b class="KEYCAP">Shift</b>-<b class=
          "KEYCAP">Insert</b>.</p>

          <p>Support for USB devices was added to the <tt class=
          "FILENAME">GENERIC</tt> kernel and to the installation
          programs to support USB devices out of the box. Note that
          SRM does not support USB devices at the moment, so you
          must still use an AT keyboard if you are not using a
          serial console. [MERGED]</p>

          <p>The umodem driver for USB modems has been added.
          Support is provided for the 3Com 5605 and Metricom
          Ricochet GS wireless USB modems. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=uscanner&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">uscanner</span>(4)</span></a> driver for
          basic USB scanner support using SANE has been added. See
          <a href="http://www.mostang.com/sane/" target="_top">the
          SANE home page</a> for supported scanners. The HP ScanJet
          4100C, 5200C and 6300C are known to be working.
          [MERGED]</p>

          <p>The <tt class="LITERAL">USER_LDT</tt> kernel option is
          now activated by default.</p>

          <p>A VESA S3 linear framebuffer driver has been
          added.</p>

          <p>Write combining for crashdumps has been implemented.
          This feature is useful when write caching is disabled on
          both SCSI and IDE disks, where large memory dumps could
          take up to an hour to complete. [MERGED]</p>

          <p>Extremely large swap areas (&gt;67 GB) no longer panic
          the system.</p>

          <p>The <tt class="MAKETARGET">buildkernel</tt> target now
          gets the name of the configuration(s) to build from the
          <tt class="VARNAME">KERNCONF</tt> variable, not <tt
          class="VARNAME">KERNEL</tt>. It is no longer required, in
          some cases, for a <tt class="MAKETARGET">buildworld</tt>
          to precede a <tt class="MAKETARGET">buildkernel</tt>.
          (The <tt class="MAKETARGET">buildworld</tt> is still
          required when upgrading across major releases, across <b
          class="APPLICATION">binutil</b> updates and when <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=config&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">config</span>(8)</span></a> changes
          version.) [MERGED]</p>

          <p>The out-of-swap process termination code now begins
          killing processes earlier to avoid deadlocks; it now also
          takes into account the swap space used by processes when
          computing the process sizes. [MERGED]</p>

          <p>Linker sets are now self-contained; <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gensetdefs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gensetdefs</span>(8)</span></a> is
          unnecessary and has been removed.</p>

          <p>Numerous SMP-friendly changes have been made to the
          kernel's mbuf allocator.</p>

          <p>Network device cloning has been implemented, and the
          <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gif&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gif</span>(4)</span></a> device has been
          modified to take advantage of it. Thus, instead of
          specifying how many <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gif&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gif</span>(4)</span></a> interfaces are
          available in kernel configuration files, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ifconfig</span>(8)</span></a>'s <tt
          class="OPTION">create</tt> option should be used when
          another device instance is desired. [MERGED]</p>

          <p>It is now possible to hardwire kernel environment
          variables (such as tuneables) at compile-time using <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=config&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">config</span>(8)</span></a>'s <tt class=
          "LITERAL">ENV</tt> directive.</p>

          <p>Idle zeroing of pages can be enabled with the <tt
          class="VARNAME">vm.zeroidle_enable</tt> sysctl
          variable.</p>

          <p>The load addresses of kernels are now exported to the
          symbol table and various hard-coded constants have been
          removed so that utilities such as <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ps&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ps</span>(1)</span></a> can work with
          kernels compiled at different addresses. [MERGED]</p>

          <p>Coredumps of large processes (or of a large number of
          processes) no longer lock up the machine for long periods
          of time. [MERGED]</p>

          <p>The kernel is now aware of the concept that there are
          smaller units of scheduling than a process (but only one
          thread per process is allowed at this time).</p>

          <p>The kernel now has support for multiple low-level
          console devices. The new <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=conscontrol&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">conscontrol</span>(8)</span></a> utility
          helps to manage the different consoles.</p>

          <p>The kernel on the installation CDs is now separated
          from the <tt class="FILENAME">mfsroot</tt> image. This
          permits the use of a full kernel when installing from CD
          on machines that support CD booting (instead of the
          stripped-down kernel used on floppies). [MERGED]</p>

          <p>The system load average computation now adds some
          jitter to the timing of samples, in order to avoid
          synchronization with processes that run periodically.
          [MERGED]</p>

          <p>If a debugging kernel with modules is being built
          (i.e. using <tt class="LITERAL">makeoptions
          DEBUG=-g</tt>), the modules will now be built with
          debugging support as well, for completeness. A side
          effect of this change is that modules built and installed
          with debugging kernels will now occupy more space on disk
          than they did previously. [MERGED]</p>

          <p>The kernel dump device can now be set via the <tt
          class="VARNAME">dumpdev</tt> loader tunable. As a result,
          it is now possible to obtain crash dumps from panics
          during the late stages of kernel initialization (before
          the system enters into single-user mode). [MERGED]</p>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN276">2.1.1
            Processor/Motherboard Support</a></h3>

            <p>SMP support has been largely reworked, incorporating
            code from BSD/OS 5.0. One of the main features of SMPng
            (``SMP Next Generation'') is to allow more processes to
            run in kernel, without the need for spin locks that can
            dramatically reduce the efficiency of multiple
            processors. Interrupt handlers now have contexts
            associated with them that allow them to be blocked,
            which reduces the need to lock out interrupts.</p>

            <p>Support for the 80386 processor has been removed
            from the <tt class="FILENAME">GENERIC</tt> kernel, as
            this code seriously pessimizes performance on other
            IA32 processors.</p>

            <p>The <tt class="LITERAL">I386_CPU</tt> kernel option
            to support the 80386 processor is now mutually
            exclusive with support for other IA32 processors; this
            should slightly improve performance on the 80386 due to
            the elimination of runtime processor type checks.</p>

            <p>Custom kernels that will run on the 80386 can still
            be built by changing the cpu options in the kernel
            configuration file to only include <tt class=
            "LITERAL">I386_CPU</tt>.</p>

            <p>Detection for new processors, such as the FC-PGA2
            Pentium III (Tualatin), Transmeta Crusoe, and Transmeta
            Crusoe LongRun, has been added. [MERGED]</p>

            <p>Support for Streaming <span class=
            "ACRONYM">SIMD</span> Extensions (<span class=
            "ACRONYM">SSE</span>) has been introduced. The <tt
            class="LITERAL">CPU_ENABLE_SSE</tt> kernel option
            controls whether support is compiled into the kernel.
            [MERGED]</p>

            <p>The <tt class="LITERAL">CPU_ATHLON_SSE_HACK</tt>
            kernel option has been added, which attempts to enable
            the SSE feature bit on newer Athlon CPUs if the BIOS
            has forgotten to enable it.</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN305">2.1.2 Bootloader
            Changes</a></h3>

            <p>A new <tt class="FILENAME">cdboot</tt> bootstrap
            utility for CDROMs provides better compatability with
            some BIOS implementations that do not completely
            implement the El Torito bootable CDROM standard. This
            boot loader supports ``no emulation'' mode booting,
            thus eliminating the need for an emulated floppy disk
            image on a bootable CDROM. [MERGED]</p>

            <p>The i386 boot loader now has support for a <tt
            class="LITERAL">nullconsole</tt> console type, for use
            on systems with neither a video console nor a serial
            port. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=loader&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">loader</span>(8)</span></a> now has
            optional support (enabled at compile-time, off by
            default) for loading <b class=
            "APPLICATION">bzip2</b>-compressed kernels and modules.
            [MERGED]</p>

            <p>Support for Intel's Wired for Management 2.0 (PXE)
            was added to the FreeBSD boot loader. Due to API
            differences, the older PXE versions are not supported.
            This allow network booting using DHCP. [MERGED]</p>

            <p>The FreeBSD boot loader now contains a workaround to
            support CDROM booting on certain IBM BIOSs that expect
            the first sector of the emulated floppy to contain a
            valid MS-DOS BPB that they can modify. [MERGED]</p>

            <p>The FreeBSD boot loader now supports a <tt class=
            "OPTION">-p</tt> flag to force the kernel to pause
            after each line of output during the probing phase.
            [MERGED]</p>

            <p>The FreeBSD boot loader is now capable of booting
            from filesystems with block sizes larger than 8K.
            [MERGED]</p>

            <p>The kernel and modules have been moved to the
            directory <tt class="FILENAME">/boot/kernel</tt>, so
            they can be easily manipulated together. The boot
            loader has been updated to make this change as seamless
            as possible.</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN324">2.1.3 Network
            Interface Support</a></h3>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=an&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">an</span>(4)</span></a> driver for
            Cisco Aironet cards now supports Wired Equivalent
            Privacy (WEP) encryption, settable via <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ancontrol&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ancontrol</span>(8)</span></a>.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=an&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">an</span>(4)</span></a> driver now
            supports the Cisco Aironet 350 series of adaptors.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=an&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">an</span>(4)</span></a> driver now
            supports ``monitor'' mode, settable via the <tt class=
            "OPTION">-M</tt> option to <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ancontrol&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ancontrol</span>(8)</span></a>.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=an&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">an</span>(4)</span></a> driver now
            supports Cisco LEAP, as well as the ``Home'' WEP key.
            The Linux Aironet utilities are now supported under
            emulation. [MERGED]</p>

            <p>Generic support for ARCNET token-based networks has
            been added. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=bge&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">bge</span>(4)</span></a> driver has
            been added to support the Broadcom BCM570x family of
            Gigabit Ethernet controllers, including the 3Com
            3c996-T, the SysKonnect SK-9D21 and SK-9D41, and the
            built-in Gigabit Ethernet NICs on Dell PowerEdge 2550
            servers. Output TCP/IP checksum offload, jumbo frames
            and VLAN tag insertion/stripping are supported, as well
            as interrupt moderation. [MERGED]</p>

            <p>The cm driver has been added to support SMC COM90cx6
            ARCNET network adapters. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=dc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">dc</span>(4)</span></a> driver now
            supports NICs based on the Xircom 3201 and Conexant
            LANfinity RS7112 chips.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=dc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">dc</span>(4)</span></a> driver now has
            support for VLANs. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=de&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">de</span>(4)</span></a> driver now
            performs round-robin arbitration between the transmit
            and receive units of the 21143, instead of giving
            priority to the receive unit. This gives a 10-15%
            performance improvement in the forwarding rate under
            heavy load. [MERGED]</p>

            <p>Linksys Fast Ethernet PCCARD cards supported by the
            <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ed&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ed</span>(4)</span></a> driver now
            require the addition of flag <tt class=
            "LITERAL">0x80000</tt> to their config line in <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pccard.conf&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pccard.conf</span>(5)</span></a>. This
            flag is not optional. These Linksys cards will not be
            recognized without it. [MERGED]</p>

            <p>A bug in the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ed&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ed</span>(4)</span></a> driver that
            could cause panics with very short packets and BPF or
            bridging active has been fixed. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ed&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ed</span>(4)</span></a> driver now has
            support for D-Link DL10022 chips, necessary for the
            NetGear FA-410TX and other cards. As a result, <tt
            class="LITERAL">device miibus</tt> is required in
            kernel configurations using the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ed&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ed</span>(4)</span></a> driver.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=el&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">el</span>(4)</span></a> driver can now
            be loaded as a module.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=em&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">em</span>(4)</span></a> driver has been
            added to support NICs based on the Intel 82542, 82543,
            and 82544 Gigabit Ethernet controller chips. The driver
            supports transmit/receive checksum offload and jumbo
            frames on 82543 and 82544-based adapters. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=faith&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">faith</span>(4)</span></a> device is
            now loadable, unloadable, and clonable. [MERGED]</p>

            <p>Support for Fujitsu MB86960A/MB86965A based Ethernet
            PC-Cards has been added back in the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=fe&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">fe</span>(4)</span></a> driver.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=fxp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">fxp</span>(4)</span></a> driver now
            requires a <tt class="LITERAL">device miibus</tt> entry
            in the kernel configuration file. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=fxp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">fxp</span>(4)</span></a> driver now
            contains a workaround for PCI protocol violations
            caused by defects in some systems based on the Intel
            ICH2/ICH2-M chip. The workaround is to rewrite the
            EEPROM on the interface to disable Dynamic Standby
            Mode; once the EEPROM is rewritten, the system needs to
            be rebooted for the new settings to take effect.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=fxp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">fxp</span>(4)</span></a> driver now
            supports Intel's loadable microcode to implement
            receive-side interrupt coalescing and packet bundling,
            on NICs that support these features. This support can
            be activated by the use of the <tt class=
            "OPTION">link0</tt> option to <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ifconfig</span>(8)</span></a>.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=gx&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">gx</span>(4)</span></a> driver has been
            added to support NICs based on the Intel 82542 and
            82543 Gigabit Ethernet controller chips. Both fiber and
            copper variants of the cards are supported. Both boards
            support VLAN tagging/insertion, and the 82543
            additionally supports TCP/IP checksum offload.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=lge&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">lge</span>(4)</span></a> driver has
            been added to support the Level 1 LXT1001 NetCellerator
            Gigabit Ethernet controller chip. This device is used
            on some fiber optic GigE cards from SMC, D-Link and
            Addtron. Jumbograms and TCP/IP checksum offload on
            receive are supported, although hardware VLAN filtering
            is not. [MERGED]</p>

            <p>Added the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=nge&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">nge</span>(4)</span></a> driver, which
            supports PCI Gigabit Ethernet adapters based on the
            National Semiconductor DP83820 and DP83821 Gigabit
            Ethernet controller chips, including the D-Link
            DGE-500T, SMC EZ Card 1000 (SMC9462TX), Asante
            FriendlyNet GigaNIC 1000TA and 1000TPC and Addtron
            AEG320T. This driver supports transmit and receive
            checksum offloading. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pcn&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pcn</span>(4)</span></a> driver, which
            supports the AMD PCnet/FAST, PCnet/FAST+, PCnet/FAST
            III, PCnet/PRO, PCnet/Home, and HomePNA adapters, has
            been added. Although these cards are already supported
            by the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=lnc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">lnc</span>(4)</span></a> driver, the <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pcn&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pcn</span>(4)</span></a> driver runs
            these chips in 32-bit mode and uses the RX alignment
            feature to achieve zero-copy receive. This driver is
            also machine-independent, so it will work on both the
            i386 and Alpha platforms. The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=lnc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">lnc</span>(4)</span></a> driver is
            still needed to support non-PCI cards. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ray&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ray</span>(4)</span></a> driver, which
            supports the Webgear Aviator wireless network cards,
            has been committed. The operation of <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ray&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ray</span>(4)</span></a> interfaces can
            be modified by <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=raycontrol&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">raycontrol</span>(8)</span></a>.
            [MERGED]</p>

            <p>The sbni driver, for supporting the Granch SBNI12
            series of ISA and PCI point-to-point communications
            interfaces, has been added. The <a href=
            "http://www.FreeBSD.org/cgi/url.cgi?ports/sysutils/sbniconfig/pkg-descr">
            <tt class="FILENAME">sysutils/sbniconfig</tt></a> port
            in the FreeBSD Ports Collection can be used for
            configuring these devices. [MERGED]</p>

            <p>Added support for PCI Ethernet adapters based on the
            SiS 900 and SiS 7016 Fast Ethernet controller chips
            (for example, as seen on the SiS 635 and 735
            motherboard chipsets), as well as the National
            Semiconductor DP83815 chipset (including the NetGear
            FA311-TX and FA312-TX) in the form of the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=sis&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">sis</span>(4)</span></a> driver. This
            device has support for VLANs. [MERGED]</p>

            <p>The snc driver for the National Semiconductor
            DP8393X (SONIC) Ethernet controller has been added.
            Currently, this driver is only used on the PC-98
            architecture. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=stf&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">stf</span>(4)</span></a> device is now
            clonable.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=tap&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">tap</span>(4)</span></a> driver, a
            virtual Ethernet device driver for bridged
            configurations, has been added. This device is
            clonable. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ti&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ti</span>(4)</span></a> driver now
            supports the Alteon AceNIC 1000baseT Gigabit Ethernet
            and Netgear GA620T 1000baseT Gigabit cards.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ti&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ti</span>(4)</span></a> driver
            correctly masks VLAN tags. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=txp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">txp</span>(4)</span></a> driver has
            been added to support NICs based on the 3Com 3XP
            Typhoon/Sidewinder (3CR990) chipset. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=vlan&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">vlan</span>(4)</span></a> devices are
            now loadable, unloadable, and clonable. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=wi&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">wi</span>(4)</span></a> driver now has
            support for Prism II and Prism 2.5-based NICs.
            104/128-bit WEP now works on Prism cards. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=xl&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">xl</span>(4)</span></a> driver now
            supports the 3Com 3C556 and 3C556B MiniPCI adapters
            used on some laptops. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=xl&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">xl</span>(4)</span></a> driver now
            supports reception of VLAN tagged frames (on the
            ``Cyclone'' or newer chipsets). [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=xl&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">xl</span>(4)</span></a> driver now
            supports send- and receive-side TCP/IP checksum
            offloading for NICs implementing this feature, such as
            the 3C905B, 3C905C, and 3C980C. [MERGED]</p>

            <p>A bug in the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=xl&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">xl</span>(4)</span></a> driver, related
            to statistics overflow interrupt handling, was causing
            slowdowns at medium to high packet rates; this has been
            fixed. [MERGED]</p>

            <p>The per-interface <tt class="VARNAME">ifnet</tt>
            structure now has the ability to indicate a set of
            capabilities supported by a network interface, and
            which ones are enabled. <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ifconfig</span>(8)</span></a> has
            support for querying these capabilities. [MERGED]</p>

            <p>Performance with hosts having a large number of IP
            aliases has been improved, by replacing the
            per-interface <tt class="VARNAME">if_inaddr</tt> linear
            list with a hash table. [MERGED]</p>

            <p>Network devices now automatically appear as special
            files in <tt class="FILENAME">/dev/net</tt>. Interface
            hardware ioctls (not protocol or routing) can be
            performed on these devices. The <tt class=
            "VARNAME">SIOCGIFCONF</tt> ioctl may be performed on
            the special <tt class="FILENAME">/dev/network</tt>
            node.</p>

            <p>Selected network drivers now implement a
            semi-polling mode, which makes systems much more
            resilient to attacks and overloads. To enable polling,
            the following options are required in a kernel
            configuration file:</p>
<pre class="PROGRAMLISTING">
    options DEVICE_POLLING
    options HZ=1000 # not compulsory but strongly recommended
</pre>
            The <tt class="VARNAME">kern.polling.enable</tt> sysctl
            variable will then activate polling mode; with the <tt
            class="VARNAME">kern.polling.user_frac</tt> sysctl
            indicating the percentage of CPU time to be reserved
            for userland. The devices initially supporting polling
            are <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=dc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">dc</span>(4)</span></a>, <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=fxp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">fxp</span>(4)</span></a>, and <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=sis&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">sis</span>(4)</span></a>. More details
            can be found in the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=polling&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">polling</span>(4)</span></a> manual
            page. [MERGED]<br>
            <br>

            <p>The packet-forwarding performance of certain network
            drivers (specifically <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=dc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">dc</span>(4)</span></a> and <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=sis&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">sis</span>(4)</span></a>) has been
            enhanced by the elimination of unnecessary buffer
            copies. [MERGED]</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN553">2.1.4 Network
            Protocols</a></h3>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=accept_filter&sektion=9&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">accept_filter</span>(9)</span></a>, a
            kernel feature to reduce overheads when accepting and
            reading new connections on listening sockets, has been
            added. [MERGED]</p>

            <p>The <tt class="LITERAL">proxy</tt> modifier to <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=arp&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">arp</span>(8)</span></a>'s <tt class=
            "OPTION">-d</tt> option has been renamed to <tt class=
            "LITERAL">pub</tt>, for consistency with the <tt class=
            "OPTION">-s</tt> option. The <tt class=
            "LITERAL">only</tt> keyword has been added to the <tt
            class="OPTION">-s</tt> and <tt class="OPTION">-S</tt>
            flags, to be used in creating ``proxy-only'' published
            entries. [MERGED]</p>

            <p>The read timeout feature of <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=bpf&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">bpf</span>(4)</span></a> now works more
            correctly with <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=select&sektion=2&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">select</span>(2)</span></a>/<a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=poll&sektion=2&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">poll</span>(2)</span></a>, and
            therefore with pthreads. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=bridge&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">bridge</span>(4)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=dummynet&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">dummynet</span>(4)</span></a> have
            received some enhancements and bug fixes, and are now
            loadable modules. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=bridge&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">bridge</span>(4)</span></a> now has
            better support for multiple, fully-independent bridging
            clusters, and is much more stable in the presence of
            dynamic attachments and detatchments. Full support for
            VLANs is also supported. [MERGED]</p>

            <p>ICMP ECHO and TSTAMP replies are now rate limited.
            TCP RSTs generated due to packets sent to open and
            unopen ports are now limited by separate counters. Each
            rate limiting queue now has its own description.</p>

            <p>ICMP <tt class="LITERAL">UNREACH_FILTER_PROHIB</tt>
            messages can now RST TCP connections in the <tt class=
            "LITERAL">SYN_SENT</tt> state if the correct sequence
            numbers are sent back, as controlled by the <tt class=
            "VARNAME">net.inet.tcp.icmp_may_rst</tt> sysctl.</p>

            <p>IP multicast now works on VLAN devices. Several
            other bugs in the VLAN code have also been fixed.</p>

            <p>A bug in the IPSec processing for IPv4, which caused
            the inbound SPD checks to be ignored, has been fixed.
            [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ipfw</span>(4)</span></a> now filters
            correctly in the presence of ECN bits in TCP segments.
            [MERGED]</p>

            <p>A new <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_eth&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_eth</span>(4)</span></a> netgraph
            node allows Ethernet type packets to be filtered to
            different hooks depending on ethertype.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_gif&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_gif</span>(4)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_gif_demux&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_gif_demux</span>(4)</span></a>
            netgraph nodes, for operating on <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=gif&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">gif</span>(4)</span></a> devices, have
            been added.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_ip_input&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_ip_input</span>(4)</span></a>
            netgraph node, for queueing IP packets into the main IP
            input processing code, has been added.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_mppc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_mppc</span>(4)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_bridge&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_bridge</span>(4)</span></a> node
            types have been added to the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=netgraph&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">netgraph</span>(4)</span></a>
            subsystem. The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_ether&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_ether</span>(4)</span></a> node is
            now dynamically loadable. Miscellaneous bug fixes and
            enhancements have also been made. [MERGED]</p>

            <p>A new netgraph node type <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ng_one2many&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ng_one2many</span>(4)</span></a> for
            multiplexing and demultiplexing packets over multiple
            links has been added. [MERGED]</p>

            <p>A new sysctl <tt class=
            "VARNAME">net.inet.ip.check_interface</tt>, which is on
            by default, causes IP to verify that an incoming packet
            arrives on an interface that has an address matching
            the packet's destination address. [MERGED]</p>

            <p>A new sysctl <tt class=
            "VARNAME">net.link.ether.inet.log_arp_wrong_iface</tt>
            has been added to control the suppression of logging
            when ARP replies arrive on the wrong interface.
            [MERGED]</p>

            <p>A new <tt class="LITERAL">options RANDOM_IP_ID</tt>
            kernel option causes the ID field of IP packets to be
            randomized. This closes a minor information leak which
            allows a remote observer to determine the rate at which
            the machine is generating packets, since the default
            behavior is to increment a counter for each packet
            sent. [MERGED]</p>

            <p>TCP has received some bug fixes for its delayed ACK
            behavior. [MERGED]</p>

            <p>TCP now supports the NewReno modification to the TCP
            Fast Recovery algorithm. This behavior can be
            controlled via the <tt class=
            "VARNAME">net.inet.tcp.newreno</tt> sysctl variable.
            [MERGED]</p>

            <p>TCP now uses a more aggressive timeout for initial
            SYN segments; this allows initial connection attempts
            to be dropped much faster. [MERGED]</p>

            <p>The <tt class="LITERAL">TCP_COMPAT_42</tt> kernel
            option has been removed. [MERGED]</p>

            <p>The <tt class="LITERAL">TCP_RESTRICT_RST</tt> kernel
            option has been removed. Similar functionality can be
            achieved with the <tt class=
            "VARNAME">net.inet.tcp.blackhole</tt> sysctl variable.
            [MERGED]</p>

            <p>TCP now has RFC 1323 extensions enabled by default
            in <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=rc.conf&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">rc.conf</span>(5)</span></a>.
            [MERGED]</p>

            <p>RFC 1323 and RFC 1644 TCP extensions are now
            disabled for a connection in progress if no response
            has been received by the third SYN segment sent. This
            behavior tries to work around (very old) terminal
            servers with buggy VJ header compression
            implementations. [MERGED]</p>

            <p>The TCP implementation no longer requires the
            allocation of a TCP template structure for each
            connection; this should reduce the buffer usage on
            large systems handling many connections. [MERGED]</p>

            <p>TCP's default buffer sizes, controlled by the <tt
            class="VARNAME">net.inet.tcp.sendspace</tt> and <tt
            class="VARNAME">net.inet.tcp.recvspace</tt> sysctl
            variables, have been increased to 32K and 64K
            respectively. Previously, the default for both buffer
            sizes was 16K. To try to avoid increasing congestion,
            the default value for <tt class=
            "VARNAME">net.inet.tcp.local_slowstart_flightsize</tt>
            has been changed from infinity to 4. [MERGED]</p>

            <div class="NOTE">
              <blockquote class="NOTE">
                <p><b>Note:</b> On busy hosts, the new larger
                buffer sizes may require manually increasing the
                <tt class="VARNAME">NMBCLUSTERS</tt> parameter,
                either in the kernel configuration file or via the
                <tt class="VARNAME">kern.ipc.nmbclusters</tt>
                loader tunable. <tt class="COMMAND">netstat
                -mb</tt> can be used to monitor the state of mbuf
                clusters.</p>
              </blockquote>
            </div>
            <br>
            <br>

            <p>TCP now supports RFC 1948 (Defending Against
            Sequence Number Attacks). This functionality is
            controlled by the <tt class=
            "VARNAME">net.inet.tcp.strict_rfc1948</tt> and <tt
            class="VARNAME">net.inet.tcp.isn_reseed_interval</tt>
            sysctl variables. [MERGED]</p>

            <p>The TCP implementation in FreeBSD now implements a
            cache of outstanding, received SYN segments. Incoming
            SYN segments now cause entries to be placed in the
            cache until the TCP three-way handshake is complete, at
            which point, memory is allocated for the connection as
            usual. In addition, all TCP Initial Sequence Numbers
            (ISNs) are used as cookies, allowing entries in the
            cache to be dropped, but still have their corresponding
            ACKs accepted later. The combination of the so-called
            ``syncache'' and ``syncookies'' features makes a host
            much more resistant to TCP-based Denial of Service
            attacks. Work on this feature was sponsored by DARPA
            and NAI Labs. [MERGED]</p>

            <p>A bug in the TCP implementation, which could cause
            connections to stall if a sender saw a zero-sized
            window, has been corrected. [MERGED]</p>

            <p>The TCP implementation now properly ignores packets
            addressed to IP-layer broadcast addresses. [MERGED]</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN678">2.1.5 Disks and
            Storage</a></h3>

            <p>Support for the Adaptec FSA family of PCI-SCSI RAID
            controllers has been added, in the form of the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=aac&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">aac</span>(4)</span></a> driver. This
            driver includes proper handling of commands initiated
            by the adapter, addition/removal of disk devices,
            crashdump functionality, and <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ioctl&sektion=2&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ioctl</span>(2)</span></a> commands
            necessary for the management CLI, and is fully
            qualified and sanctioned by Adaptec. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ahc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ahc</span>(4)</span></a> driver has
            received numerous updates, bugfixes, and enhancements.
            Among various improvements are improved compatibility
            with chips in ``RAID Port'' mode and systems with AAA
            and/or ARO cards installed, as well as performance
            improvements. Some bugs were also fixed, including a
            rare hang on Ultra2/U160 controllers. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=asr&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">asr</span>(4)</span></a> driver, which
            provides support for the Adaptec SCSI RAID controller
            family, as well as the DPT SmartRAID V and VI families,
            has been added. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=asr&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">asr</span>(4)</span></a> driver now
            supports the Adaptec 2000S and 2005S Zero-Channel RAID
            controllers. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver now has
            support for ATA100 controllers. In addition, it now
            supports the ServerWorks ROSB4 ATA33 chipset, the CMD
            648 ATA66 and CMD 649 ATA100 chipsets, and the Cyrix
            5530. [MERGED]</p>

            <p>To provide more flexible configuration, the various
            options for the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver are now
            boot loader tunables, rather than kernel configure-time
            options. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver now has
            support for tagged queuing, which is enabled by the <tt
            class="VARNAME">hw.ata.tags</tt> loader tunable.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver now has
            support for ATA ``pseudo'' RAID controllers as the
            Promise Fasttrak and HighPoint HPT370 controllers.
            [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver now
            supports a wider variety of SiS chipsets, as listed in
            the Hardware Notes. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver now has
            support for rebuilding failed drives in a RAID1
            configuration, under control of <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=atacontrol&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">atacontrol</span>(8)</span></a></p>

            <p>The BurnProof(TM) feature, for applicable ATAPI
            CD-ROM burners, is now supported. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver now has
            support for 48-bit addressing. Devices larger than
            137GB are now supported. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver now
            contains fixes for some data corruption problems on
            systems using the VIA 82C686B Southbridge chip.
            [MERGED]</p>

            <p>The CAM error recovery code has been updated.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=cd&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">cd</span>(4)</span></a> driver now has
            support for write operations. This allows writing to
            DVD-RAM, PD and similar drives that probe as CD
            devices. Note that change affects only random-access
            writeable devices, not sequential-only writeable
            devices such as CD-R drives, which are supported by <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=cdrecord&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">cdrecord</span>(1)</span></a> (a part
            of <a href=
            "http://www.FreeBSD.org/cgi/url.cgi?ports/sysutils/cdrtools/pkg-descr">
            <tt class="FILENAME">sysutils/cdrtools</tt></a> in the
            Ports Collection. [MERGED]</p>

            <p>The ciss driver, for devices utilizing the Common
            Interface for SCSI-3 Support, has been added. This
            driver supports the Compaq SmartRAID 5* family of RAID
            controllers (5300, 532, 5i). [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=fdc&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">fdc</span>(4)</span></a> floppy disk
            has undergone a number of enhancements. Density
            selection for common settings is now automatic; the
            driver is also much more flexible in setting the
            densities of various subdevices.</p>

            <p>The ida disk driver now has crashdump support.
            [MERGED]</p>

            <p>The iir driver has been added to support the Intel
            Integrated RAID controllers, as well as prior ICP
            Vortex controllers.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=isp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">isp</span>(4)</span></a> driver is now
            proactive about discovering Fibre Channel topology
            changes.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=isp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">isp</span>(4)</span></a> driver now
            supports target mode for Qlogic SCSI cards, including
            Ultra2 and Ultra3 and dual bus cards.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=isp&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">isp</span>(4)</span></a> driver now
            supports the Qlogic 2300 and 2312 Optical Fibre Channel
            PCI cards. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=md&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">md</span>(4)</span></a>, the memory
            disk device, has had the functionality of <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=vn&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">vn</span>(4)</span></a> incorporated
            into it. <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=md&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">md</span>(4)</span></a> devices can now
            be configured by <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=mdconfig&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">mdconfig</span>(8)</span></a>. <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=vn&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">vn</span>(4)</span></a> has been
            removed. The Memory Filesystem (MFS) has also been
            removed.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=mly&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">mly</span>(4)</span></a> driver, for
            Mylex PCI to SCSI AccelRAID and eXtremeRAID controllers
            with firmware 6.X and later, has been added.
            [MERGED]</p>

            <p>The ncv, nsp, and stg drivers have been ported from
            NetBSD/pc98. They support the NCR 53C50 / Workbit Ninja
            SCSI-3 / TMC 18C30, 18C50 based PC-Card/ISA SCSI
            controllers. All three drivers can be built and loaded
            as modules. [MERGED]</p>

            <p>Some problems in <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=sa&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">sa</span>(4)</span></a> error handling
            have been fixed, including the ``tape drive spinning
            indefinitely upon <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=mt&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">mt</span>(1)</span></a> <tt class=
            "OPTION">stat</tt>'' problem.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=twe&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">twe</span>(4)</span></a> 3ware ATA RAID
            driver has added. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=vinum&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">vinum</span>(4)</span></a> volume
            manager has received some bug fixes and
            enhancements.</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=wd&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">wd</span>(4)</span></a> compatibility
            devices were removed from the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ata</span>(4)</span></a> driver.
            [MERGED]</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN815">2.1.6
            Filesystems</a></h3>

            <p>Support for named extended attributes was added to
            the FreeBSD kernel. This allows the kernel, and
            appropriately privileged userland processes, to tag
            files and directories with attribute data. Extended
            attributes were added to support the TrustedBSD
            Project, in particular ACLs, capability data, and
            mandatory access control labels (see <tt class=
            "FILENAME">/usr/src/sys/ufs/ufs/README.extattr</tt> for
            details).</p>

            <p>Due to a licensing change, softupdates have been
            integrated into the main portion of the kernel source
            tree. As a consequence, softupdates are now available
            with the <tt class="FILENAME">GENERIC</tt> kernel.
            [MERGED]</p>

            <p>A filesystem snapshot capability has been added to
            FFS. Details can be found in <tt class=
            "FILENAME">/usr/src/sys/ufs/ffs/README.snapshot</tt>.</p>

            <p>Softupdates for FFS have received some bug fixes and
            enhancements.</p>

            <p>When running with softupdates, <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=statfs&sektion=2&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">statfs</span>(2)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=df&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">df</span>(1)</span></a> will track the
            number of blocks and files that are committed to being
            freed.</p>

            <p>A bug in FFS that could cause superblock corruption
            on very large filesystems has been corrected.
            [MERGED]</p>

            <p>The Inode Filesystem (IFS) has been added; more
            information can be found in <tt class=
            "FILENAME">/usr/src/sys/ufs/ifs/README</tt>.</p>

            <p>The ISO-9660 filesystem now has a hook that supports
            a loadable character conversion routine. The <a href=
            "http://www.FreeBSD.org/cgi/url.cgi?ports/sysutils/cd9660_unicode/pkg-descr">
            <tt class="FILENAME">sysutils/cd9660_unicode</tt></a>
            port contains a set of common conversions.</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=kernfs&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">kernfs</span>(5)</span></a> is obsolete
            and has been retired.</p>

            <p>A bug in the NFS client that caused bogus access
            times with <tt class="LITERAL">O_EXCL|O_CREAT</tt>
            opens was fixed. [MERGED]</p>

            <p>A new NFS hash function (based on the Fowler/Noll/Vo
            hash algorithm) has been implemented to improve NFS
            performance by increasing the efficiency of the <tt
            class="VARNAME">nfsnode</tt> hash tables. [MERGED]</p>

            <p>Client-side NFS locks have been implemented.</p>

            <p>The client-side and server-side of the NFS code in
            the kernel used to be intertwined in various complex
            ways. They have been split apart for ease of
            maintenance and further development.</p>

            <p>Support for filesystem Access Control Lists (ACLs)
            has been introduced, allowing more fine-grained control
            of discretionary access control on files and
            directories. This support was integrated from the
            TrustedBSD Project. More details can be found in <tt
            class=
            "FILENAME">/usr/src/sys/ufs/ufs/README.acls</tt>.</p>

            <p>The directory layout preference algorithm for FFS
            (<tt class="LITERAL">dirprefs</tt>) has been changed.
            Rather than scattering directory blocks across a disk,
            it attempts to group related directory blocks together.
            Operations traversing large directory hierarchies, such
            as the FreeBSD Ports tree, have shown marked speedups.
            This change is transparent and automatic for new
            directories. [MERGED]</p>

            <p>smbfs (CIFS) support in kernel has been added. The
            userland programs <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=smbutil&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">smbutil</span>(1)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=mount_smbfs&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">mount_smbfs</span>(8)</span></a> can be
            used to work with SMB shares. Note that <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=mount_smbfs&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">mount_smbfs</span>(8)</span></a> will
            automatically load the <tt class=
            "FILENAME">smbfs.ko</tt> module into the kernel, even
            if <tt class="LITERAL">LIBMCHAIN</tt> and <tt class=
            "LITERAL">LIBICONV</tt> were not compiled into the
            kernel. [MERGED]</p>

            <p>For consistency, the fdesc, fifo, null, msdos,
            portal, umap, and union filesystems have been renamed
            to fdescfs, fifofs, msdosfs, nullfs, portalfs, umapfs,
            and unionfs. Where applicable, modules and mount_*
            programs have been renamed. Compatibility ``glue'' has
            been added to <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=mount&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">mount</span>(8)</span></a> so that <tt
            class="LITERAL">msdos</tt> filesystem entries in <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=fstab&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">fstab</span>(5)</span></a> will work
            without changes.</p>

            <p>pseudofs, a pseudo-filesystem framework, has been
            added. <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=linprocfs&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">linprocfs</span>(5)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=procfs&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">procfs</span>(5)</span></a> have been
            modified to use pseudofs.</p>

            <p>A simple hash-based lookup optimization for large
            directories called <tt class="LITERAL">dirhash</tt> has
            been added. Conditional on the <tt class=
            "LITERAL">UFS_DIRHASH</tt> kernel option (enabled by
            default in the <tt class="FILENAME">GENERIC</tt>
            kernel), it improves the speed of operations on very
            large directories at the expense of some memory.
            [MERGED]</p>

            <p>The virtual memory subsystem now backs UFS directory
            memory requirements by default (this behavior is
            controlled via the <tt class=
            "VARNAME">vfs.vmiodirenable</tt> sysctl variable).
            [MERGED]</p>

            <p>A bug that prevented the root filesystem from being
            mounted from a SCSI CDROM has been fixed (ATAPI CDROMs
            were always supported). [MERGED]</p>

            <p>A number of bugs in the filesystem code, discovered
            through the use of the <b class="APPLICATION">fsx</b>
            filesystem test tool, have been fixed. Under certain
            circumstances (primarily related to use of NFS), these
            bugs could cause data corruption or kernel panics.
            [MERGED]</p>

            <p>Network filesystems (such as NFS and smbfs
            filesystems) listed in <tt class=
            "FILENAME">/etc/fstab</tt> can now be properly mounted
            during startup initialization; their mounts are
            deferred until after the network is initialized.</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN890">2.1.7 PCCARD
            Support</a></h3>

            <p>The pccard driver and <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pccardc&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pccardc</span>(8)</span></a> now
            support multiple ``beep types'' upon card insertion and
            removal. [MERGED]</p>

            <p>On many modern hosts, PCCARD devices can be
            configured to route their interrupts via either the ISA
            or PCI interrupt paths. The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pcic&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pcic</span>(4)</span></a> driver has
            been updated to support both interrupt paths (formerly,
            only routing via ISA was supported). [MERGED] In most
            cases, configuration of PCMCIA devices in laptops is
            simpler and more flexible. In addition, various Cardbus
            bridge PCI cards (such as those used by Orinoco PCI
            NICs) are now supported. Some hosts may experience
            problems, such as hangs or panics, with PCI interrupt
            routing; they can frequently be made to work by forcing
            the older-style ISA interrupt routing. The following
            lines, placed in <tt class=
            "FILENAME">/boot/loader.conf</tt>, may fix the
            problem:</p>
<pre class="PROGRAMLISTING">
    hw.pcic.intr_path="1"
      hw.pcic.irq="0"
</pre>

            <p>When installing FreeBSD on such a system, typing the
            following lines to the boot loader may be helpful in
            starting up FreeBSD for the first time:</p>

            <p>&#13;</p>
<pre class="SCREEN">
    <tt class="PROMPT">ok</tt> <tt class=
"USERINPUT"><b>set hw.pcic.intr_path="1"</b></tt>
    <tt class="PROMPT">ok</tt> <tt class=
"USERINPUT"><b>set hw.pcic.irq="0"</b></tt>
</pre>
            <br>
            <br>

            <p>Preliminary Cardbus support under NEWCARD has been
            added. This code supports the TI113X, TI12XX, TI125X,
            Ricoh 5C46/5C47, Topic 95/97/100 and Cirrus Logic
            PD683X bridges. 16-bit PC Card support is not yet
            functional.</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN911">2.1.8 Multimedia
            Support</a></h3>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pcm&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pcm</span>(4)</span></a> driver now
            supports the ESS Solo 1, Maestro-1, Maestro-2, and
            Maestro-2e; Forte Media fm801, ESS Maestro-2e, and VIA
            Technologies VT82C686A sound card/chipsets, and has
            received some other updates. Separate drivers for the
            SoundBlaster 8 and SoundBlaster 16 now replace an
            older, unified driver. A driver for the CMedia
            CMI8338/CMI8738 sound chips has been added. A driver
            for the CS4281 sound chip has been added. A driver for
            the S3 SonicVibes chipset has been added. [MERGED]</p>

            <p>A driver for the Avance Logic ALS4000 has been
            added. [MERGED]</p>

            <p>A driver for the ESS Maestro-3/Allegro has been
            added, however due to licensing restrictions, it cannot
            be compiled into the kernel. [MERGED] To use this
            driver, add the following line to <tt class=
            "FILENAME">/boot/loader.conf</tt>:</p>
<pre class="PROGRAMLISTING">
    snd_maestro3_load="YES"
</pre>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=bktr&sektion=4&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">bktr</span>(4)</span></a> driver has
            been updated to 2.18. This update provides a number of
            new features. New tuner types have been added, and
            improvements to the KLD module and to memory allocation
            have been made. Bugs in <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=devfs&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">devfs</span>(5)</span></a> when
            unloading and reloading have been fixed. Support for
            new Hauppauge Model 44xxx WinTV Cards (the ones with no
            audio mux) has been added. [MERGED]</p>

            <p>The ufm driver, supporting the D-Link DSB-R100 USB
            Radio, has been added. [MERGED]</p>

            <p>When sound modules are built, one can now load all
            the drivers and infrastructure by <tt class=
            "COMMAND">kldload snd</tt>. [MERGED]</p>

            <p>A new API has been added for sound cards with
            hardware volume control.</p>

            <p>A driver for the Intel 443MX, 810, 815, and 815E
            integrated sound devices has been added. [MERGED]</p>

            <p>The via82c686 sound driver now supports the VIA
            VT8233. [MERGED]</p>

            <p>The ich sound driver now support the SiS 7012
            chipset. [MERGED]</p>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN935">2.1.9 Contributed
            Software</a></h3>

            <p>The Forth Inspired Command Language (<b class=
            "APPLICATION">FICL</b>) used in the boot loader has
            been updated to 2.05.</p>

            <p>Support for Advanced Configuration and Power
            Interface (ACPI), a multi-vendor standard for
            configuration and power management, has been added.
            This functionality has been provided by the <b class=
            "APPLICATION">Intel ACPI Component Architecture</b>
            project, as of the ACPI CA 20020308 snapshot. Some
            backward compatability for applications using the older
            APM standard has been provided.</p>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="AEN941">2.1.9.1
              IPFilter</a></h4>

              <p><b class="APPLICATION">IPFilter</b> has been
              updated to 3.4.20. [MERGED]</p>

              <p><b class="APPLICATION">IPFilter</b> now supports
              IPv6. [MERGED]</p>
            </div>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="AEN947">2.1.9.2
              isdn4bsd</a></h4>

              <p><b class="APPLICATION">isdn4bsd</b> has been
              updated to version 1.0.1. As a result of this update,
              users of the <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=i4bisppp&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">i4bisppp</span>(4)</span></a> (kernel
              PPP over ISDN) driver <span class="emphasis"><i
              class="EMPHASIS">must</i></span> now use <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ispppcontrol&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ispppcontrol</span>(8)</span></a>
              instead of <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=spppcontrol&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">spppcontrol</span>(8)</span></a> to
              configure and control these network interfaces.
              [MERGED]</p>

              <p>The <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ifpi&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ifpi</span>(4)</span></a> driver for
              supporting the AVM Fritz!Card PCI version 2
              controller has been added.</p>

              <p>The <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ihfc&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ihfc</span>(4)</span></a> driver for
              supporting Cologne Chip Designs HFC devices under <b
              class="APPLICATION">isdn4bsd</b> has been added.
              [MERGED]</p>

              <p>The <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=itjc&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">itjc</span>(4)</span></a> driver for
              supporting NETjet-S / Teles PCI-TJ devices under <b
              class="APPLICATION">isdn4bsd</b> has been added.
              [MERGED]</p>

              <p>Experimental support for the Eicon.Diehl DIVA 2.0
              and 2.02 ISA PnP ISDN cards has been added to the <a
              href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=isic&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">isic</span>(4)</span></a> <b class=
              "APPLICATION">isdn4bsd</b> driver. [MERGED]</p>

              <p>The <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=isic&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">isic</span>(4)</span></a> driver now
              supports the Compaq Microcom 610 ISDN ISA PnP card.
              [MERGED]</p>

              <p>Active CAPI-based ISDN cards manufactured by AVM
              are now supported using the <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=i4bcapi&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">i4bcapi</span>(4)</span></a> and the
              <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=iavc&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">iavc</span>(4)</span></a> driver. The
              supported cards are the AVM B1 PCI and AVM B1 ISA
              Basic Rate cards and the AVM T1 Primary Rate cards.
              [MERGED]</p>

              <p>A new <tt class="LITERAL">maxconnecttime</tt>
              keyword is now accepted in <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=isdnd.rc&sektion=5&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">isdnd.rc</span>(5)</span></a> files
              to limit the time a connection may remain open.
              [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=isdnphone&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">isdnphone</span>(8)</span></a> now
              supports a <tt class="OPTION">-k</tt> option for
              sending messages via the keypad facility to a PBX or
              exchange office. [MERGED]</p>
            </div>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="KAME-KERNEL">2.1.9.3
              KAME</a></h4>

              <p>The IPv6 stack is now based on a snapshot based on
              the KAME Project's IPv6 snapshot as of 28 May, 2001.
              Most of the items listed in this section are a result
              of this import. <a href="#KAME-USERLAND">Section
              2.3.1.3</a> lists userland updates to the KAME IPv6
              stack. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=gif&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">gif</span>(4)</span></a> is now based
              on RFC 2893, rather than RFC 1933. The <tt class=
              "LITERAL">IFF_LINK2</tt> interface flag can be used
              to control ingress filtering. [MERGED]</p>

              <p><b class="APPLICATION">IPSec</b> has received some
              enhancements, including the ability to use the
              Rijndael and SHA2 algorithms. IPSec RC5 support has
              been removed due to patent issues. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=stf&sektion=4&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">stf</span>(4)</span></a> now conforms
              to RFC 3056; the <tt class="LITERAL">IFF_LINK2</tt>
              interface flag can be used to control ingress
              filtering. [MERGED]</p>

              <p>IPv6 has better checking of illegal addresses
              (such as loopback addresses) on physical networks.
              [MERGED]</p>

              <p>The <tt class="VARNAME">IPV6_V6ONLY</tt> socket
              option is now completely supported. The kernel's
              default behavior with respect to this option is
              controlled by the <tt class=
              "VARNAME">net.inet6.ip6.v6only</tt> sysctl variable.
              [MERGED]</p>

              <p>RFC 3041 (Privacy Extensions for Stateless Address
              Autoconfiguration) is now supported. It can be
              enabled via the <tt class=
              "VARNAME">net.inet6.ip6.use_tempaddr</tt> sysctl
              variable. [MERGED]</p>
            </div>
          </div>
        </div>

        <div class="SECT2">
          <hr>

          <h2 class="SECT2"><a name="SECURITY">2.2 Security-Related
          Changes</a></h2>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> now
          allows the user to select one of two ``security
          profiles'' at install-time. These profiles enable
          different levels of system security by enabling or
          disabling various system services in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rc.conf&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rc.conf</span>(5)</span></a> on new
          installs. [MERGED]</p>

          <p>A bug in which malformed ELF executable images can
          hang the system has been fixed (see security advisory
          FreeBSD-SA-00:41). [MERGED]</p>

          <p>A security hole in Linux emulation was fixed (see
          security advisory FreeBSD-SA-00:42). [MERGED]</p>

          <p>String-handling library calls in many programs were
          fixed to reduce the possibility of buffer
          overflow-related exploits. [MERGED]</p>

          <p>TCP now uses stronger randomness in choosing its
          initial sequence numbers (see security advisory
          FreeBSD-SA-00:52). [MERGED]</p>

          <p>Several buffer overflows in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tcpdump&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tcpdump</span>(1)</span></a> were
          corrected (see security advisory FreeBSD-SA-00:61).
          [MERGED]</p>

          <p>A security hole in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=top&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">top</span>(1)</span></a> was corrected
          (see security advisory FreeBSD-SA-00:62). [MERGED]</p>

          <p>A potential security hole caused by an
          off-by-one-error in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gethostbyname&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gethostbyname</span>(3)</span></a> has
          been fixed (see security advisory FreeBSD-SA-00:63).
          [MERGED]</p>

          <p>A potential buffer overflow in the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ncurses&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ncurses</span>(3)</span></a> library,
          which could cause arbitrary code to be run from within <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=systat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">systat</span>(1)</span></a>, has been
          corrected (see security advisory FreeBSD-SA-00:68).
          [MERGED]</p>

          <p>A vulnerability in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=telnetd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">telnetd</span>(8)</span></a> that could
          cause it to consume large amounts of server resources has
          been fixed (see security advisory FreeBSD-SA-00:69).
          [MERGED]</p>

          <p>The <tt class="LITERAL">nat deny_incoming</tt> command
          in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ppp&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ppp</span>(8)</span></a> now works
          correctly (see security advisory FreeBSD-SA-00:70).
          [MERGED]</p>

          <p>A vulnerability in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=csh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">csh</span>(1)</span></a>/<a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tcsh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tcsh</span>(1)</span></a> temporary files
          that could allow overwriting of arbitrary user-writable
          files has been closed (see security advisory
          FreeBSD-SA-00:76). [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ssh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ssh</span>(1)</span></a> binary is no
          longer SUID root by default. [MERGED]</p>

          <p>Some fixes were applied to the Kerberos IV
          implementation related to environment variables, a
          possible buffer overrun, and overwriting ticket files.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=telnet&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">telnet</span>(1)</span></a> now does a
          better job of sanitizing its environment. [MERGED]</p>

          <p>Several vulnerabilities in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=procfs&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">procfs</span>(5)</span></a> were fixed
          (see security advisory FreeBSD-SA-00:77). [MERGED]</p>

          <p>A bug in <b class="APPLICATION">OpenSSH</b> in which a
          server was unable to disable <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ssh-agent&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ssh-agent</span>(1)</span></a> or <tt
          class="LITERAL">X11Forwarding</tt> was fixed (see
          security advisory FreeBSD-SA-01:01). [MERGED]</p>

          <p>A bug in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfw</span>(8)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ip6fw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ip6fw</span>(8)</span></a> in which
          inbound TCP segments could incorrectly be treated as
          being part of an <tt class="LITERAL">established</tt>
          connection has been fixed (see security advisory
          FreeBSD-SA-01:08). [MERGED]</p>

          <p>A bug in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=crontab&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">crontab</span>(1)</span></a> that could
          allow users to read any file on the system in valid <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=crontab&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">crontab</span>(5)</span></a> syntax has
          been fixed (see security advisory FreeBSD-SA-01:09).
          [MERGED]</p>

          <p>A vulnerability in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=inetd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">inetd</span>(8)</span></a> that could
          allow read-access to the initial 16 bytes of <tt class=
          "GROUPNAME">wheel</tt>-accessible files has been fixed
          (see security advisory FreeBSD-SA-01:11). [MERGED]</p>

          <p>A bug in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=periodic&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">periodic</span>(8)</span></a> that used
          insecure temporary files has been corrected (see security
          advisory FreeBSD-SA-01:12). [MERGED]</p>

          <p>A bug in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sort&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sort</span>(1)</span></a> in which an
          attacker might be able to cause it to abort processing
          has been fixed (see security advisory FreeBSD-SA-01:13).
          [MERGED]</p>

          <p><b class="APPLICATION">OpenSSH</b> now has code to
          prevent (instead of just mitigating through connection
          limits) an attack that can lead to guessing the server
          key (not host key) by regenerating the server key when an
          RSA failure is detected (see security advisory
          FreeBSD-SA-01:24). [MERGED]</p>

          <p>A number of programs have had output formatting
          strings corrected so as to reduce the risk of
          vulnerabilities. [MERGED]</p>

          <p>A number of programs that use temporary files now do
          so more securely. [MERGED]</p>

          <p>A bug in ICMP that could cause an attacker to disrupt
          TCP and UDP ``sessions'' has been corrected. [MERGED]</p>

          <p>A bug in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=timed&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">timed</span>(8)</span></a>, which caused
          it to crash if send certain malformed packets, has been
          corrected (see security advisory FreeBSD-SA-01:28).
          [MERGED]</p>

          <p>A bug in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rwhod&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rwhod</span>(8)</span></a>, which caused
          it to crash if send certain malformed packets, has been
          corrected (see security advisory FreeBSD-SA-01:29).
          [MERGED]</p>

          <p>A security hole in FreeBSD's FFS and EXT2FS
          implementations, which allowed a race condition that
          could cause users to have unauthorized access to data,
          has been fixed (see security advisory FreeBSD-SA-01:30).
          [MERGED]</p>

          <p>A remotely-exploitable vulnerability in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ntpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ntpd</span>(8)</span></a> has been closed
          (see security advisory FreeBSD-SA-01:31). [MERGED]</p>

          <p>A security hole in <b class=
          "APPLICATION">IPFilter</b>'s fragment cache has been
          closed (see security advisory FreeBSD-SA-01:32).
          [MERGED]</p>

          <p>Buffer overflows in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=glob&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">glob</span>(3)</span></a>, which could
          cause arbitrary code to be run on an FTP server, have
          been closed. In addition, to prevent some forms of DOS
          attacks, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=glob&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">glob</span>(3)</span></a> allows
          specification of a limit on the number of pathname
          matches it will return. <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ftpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ftpd</span>(8)</span></a> now uses this
          feature (see security advisory FreeBSD-SA-01:33).
          [MERGED]</p>

          <p>Initial sequence numbers in TCP are more thoroughly
          randomized (see security advisory FreeBSD-SA-01:39). Due
          to some possible compatibility issues, the behavior of
          this security fix can be enabled or disabled via the <tt
          class="VARNAME">net.inet.tcp.tcp_seq_genscheme</tt>
          sysctl variable.[MERGED]</p>

          <p>A vulnerability in the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fts&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fts</span>(3)</span></a> routines (used
          by applications for recursively traversing a filesystem)
          could allow a program to operate on files outside the
          intended directory hierarchy. This bug has been fixed
          (see security advisory FreeBSD-SA-01:40). [MERGED]</p>

          <p>FreeBSD's TCP implementation has been made more
          resistant to SYN floods, by eliminating the RST segment
          normally sent when removing a connection from the listen
          queue.</p>

          <p><b class="APPLICATION">OpenSSH</b> now switches to the
          user's UID before attempting to unlink the authentication
          forwarding file, nullifying the effects of a race.</p>

          <p>A flaw allowed some signal handlers to remain in
          effect in a child process after being exec-ed from its
          parent. This allowed an attacker to execute arbitrary
          code in the context of a setuid binary. This flaw has
          been corrected (see security advisory FreeBSD-SA-01:42).
          [MERGED]</p>

          <p>A remote buffer overflow in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tcpdump&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tcpdump</span>(1)</span></a> has been
          fixed (see security advisory FreeBSD-SA-01:48).
          [MERGED]</p>

          <p>A remote buffer overflow in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=telnetd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">telnetd</span>(8)</span></a> has been
          fixed (see security advisory FreeBSD-SA-01:49).
          [MERGED]</p>

          <p>The new <tt class=
          "VARNAME">net.inet.ip.maxfragpackets</tt> and <tt class=
          "VARNAME">net.inet.ip6.maxfragpackets</tt> sysctl
          variables limit the amount of memory that can be consumed
          by IPv4 and IPv6 packet fragments, which defends against
          some denial of service attacks (see security advisory
          FreeBSD-SA-01:52). [MERGED]</p>

          <p>All services in <tt class="FILENAME">inetd.conf</tt>
          are now disabled by default for new installations. <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> gives the
          option of enabling or disabling <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=inetd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">inetd</span>(8)</span></a> on new
          installations, as well as editing <tt class=
          "FILENAME">inetd.conf</tt>. [MERGED]</p>

          <p>A flaw in the implementation of the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfw</span>(8)</span></a> <tt class=
          "LITERAL">me</tt> rules on point-to-point links has been
          corrected. Formerly, <tt class="LITERAL">me</tt> filter
          rules would match the remote IP address of a
          point-to-point interface in addition to the intended
          local IP address (see security advisory
          FreeBSD-SA-01:53). [MERGED]</p>

          <p>A vulnerability in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=procfs&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">procfs</span>(5)</span></a>, which could
          allow a process to read sensitive information from
          another process's memory space, has been closed (see
          security advisory FreeBSD-SA-01:55). [MERGED]</p>

          <p>The <tt class="LITERAL">PARANOID</tt> hostname
          checking in <b class="APPLICATION">tcp_wrappers</b> now
          works as advertised (see security advisory
          FreeBSD-SA-01:56). [MERGED]</p>

          <p>A local root exploit in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sendmail&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sendmail</span>(8)</span></a> has been
          closed (see security advisory FreeBSD-SA-01:57).
          [MERGED]</p>

          <p>A remote root vulnerability in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpd</span>(8)</span></a> has been closed
          (see security advisory FreeBSD-SA-01:58). [MERGED]</p>

          <p>A race condition in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rmuser&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rmuser</span>(8)</span></a> that briefly
          exposed a world-readable <tt class=
          "FILENAME">/etc/master.passwd</tt> has been fixed (see
          security advisory FreeBSD-SA-01:59). [MERGED]</p>

          <p>A vulnerability in <b class="APPLICATION">UUCP</b> has
          been closed (see security advisory FreeBSD-SA-01:62). All
          non-<tt class="USERNAME">root</tt>-owned binaries in
          standard system paths now have the <tt class=
          "LITERAL">schg</tt> flag set to prevent exploit vectors
          when run by <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=cron&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">cron</span>(8)</span></a>, by <tt class=
          "USERNAME">root</tt>, or by a user other then the one
          owning the binary. In addition, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=uustat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">uustat</span>(1)</span></a> is now run
          via <tt class=
          "FILENAME">/etc/periodic/daily/410.status-uucp</tt> as
          <tt class="USERNAME">uucp</tt>, not <tt class=
          "USERNAME">root</tt>. In FreeBSD -CURRENT, <b class=
          "APPLICATION">UUCP</b> has since been moved to the Ports
          Collection and no longer a part of the base system.
          [MERGED]</p>

          <p>A security hole in the form of a buffer overflow in
          the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=semop&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">semop</span>(2)</span></a> system call
          has been closed. [MERGED]</p>

          <p>A security hole in <b class="APPLICATION">OpenSSH</b>,
          which could allow users to execute code with arbitrary
          privileges if <tt class="LITERAL">UseLogin yes</tt> was
          set, has been closed. Note that the default value of this
          setting is <tt class="LITERAL">UseLogin no</tt>. (See
          security advisory FreeBSD-SA-01:63.) [MERGED]</p>

          <p>The use of an insecure temporary directory by <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_add&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pkg_add</span>(1)</span></a> could permit
          a local attacker to modify the contents of binary
          packages while they were being installed. This hole has
          been closed. (See security advisory FreeBSD-SA-02:01.)
          [MERGED]</p>

          <p>A race condition in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pw</span>(8)</span></a>, which could
          expose the contents of <tt class=
          "FILENAME">/etc/master.passwd</tt>, has been eliminated.
          (See security advisory FreeBSD-SA-02:02.) [MERGED]</p>

          <p>A bug in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=k5su&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">k5su</span>(8)</span></a> could have
          allowed a process that had given up superuser privileges
          to regain them. This bug has been fixed. (See security
          advisory FreeBSD-SA-02:07.) [MERGED]</p>

          <p>An ``off-by-one'' bug has been fixed in <b class=
          "APPLICATION">OpenSSH</b>'s multiplexing code. This bug
          could have allowed an authenticated remote user to cause
          <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sshd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sshd</span>(8)</span></a> to execute
          arbitrary code with superuser privileges, or allowed a
          malicious SSH server to execute arbitrary code on the
          client system with the privileges of the client user.
          (See security advisory <a href=
          "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc"
           target="_top">FreeBSD-SA-02:13</a>.) [MERGED]</p>

          <p>A programming error in <b class="APPLICATION">zlib</b>
          could result in attempts to free memory multiple times.
          The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=malloc&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">malloc</span>(3)</span></a>/<a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=free&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">free</span>(3)</span></a> routines used
          in FreeBSD are not vulnerable to this error, but
          applications receiving specially-crafted blocks of
          invalid compressed data could be made to function
          incorrectly or abort. This <b class=
          "APPLICATION">zlib</b> bug has been fixed. For a
          workaround and solutions, see security advisory <a href=
          "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:18.zlib.asc"
           target="_top">FreeBSD-SA-02:18</a>. [MERGED]</p>
        </div>

        <div class="SECT2">
          <hr>

          <h2 class="SECT2"><a name="USERLAND">2.3 Userland
          Changes</a></h2>

          <p>If the first argument to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ancontrol&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ancontrol</span>(8)</span></a> or <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=wicontrol&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">wicontrol</span>(8)</span></a> doesn't
          start with a <tt class="LITERAL">-</tt>, it is assumed to
          be an interface.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=apmd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">apmd</span>(8)</span></a> now has the
          ability to monitor battery levels and execute commands
          based on percentage or minutes of battery life remaining
          via the <tt class="LITERAL">apm_battery</tt>
          configuration directive. See the commented-out examples
          in <tt class="FILENAME">/etc/apmd.conf</tt> for the
          syntax. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=arp&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">arp</span>(8)</span></a> now prints the
          applicable interface name for each ARP entry.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=arp&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">arp</span>(8)</span></a> now prints <tt
          class="LITERAL">[fddi]</tt> or <tt class=
          "LITERAL">[atm]</tt> tags for addresses on interfaces of
          those types.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=atacontrol&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">atacontrol</span>(8)</span></a> has been
          added to control various aspects of the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ata</span>(4)</span></a> driver.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=boot98cfg&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">boot98cfg</span>(8)</span></a>, a PC-98
          boot manager installation and configuration utility, has
          been added. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=burncd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">burncd</span>(8)</span></a> now supports
          a <tt class="OPTION">-m</tt> option for multisession mode
          (the default behavior now is to close disks as
          single-session). A <tt class="OPTION">-l</tt> option to
          take a list of image files from a filename was also
          added; <tt class="FILENAME">-</tt> can be used as a
          filename for <tt class="LITERAL">stdin</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=burncd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">burncd</span>(8)</span></a> now supports
          Disk At Once (DAO) mode, selectable via the <tt class=
          "OPTION">-d</tt> flag.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=burncd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">burncd</span>(8)</span></a> now has the
          ability to write VCDs/SVCDs.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=c89&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">c89</span>(1)</span></a> has been
          converted from a shell script to a binary executable,
          fixing some minor bugs. [MERGED]</p>

          <p>A minimalized version of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=camcontrol&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">camcontrol</span>(8)</span></a> is now
          available on the installation floppy. This allows it to
          rescan for devices that have been connected after
          booting, or to show the devices attached to SCSI busses
          (e. g. from within the ``emergency holographic shell'').
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=cat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">cat</span>(1)</span></a> now has the
          ability to read from UNIX-domain sockets. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=cdcontrol&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">cdcontrol</span>(1)</span></a> now
          supports a <tt class="LITERAL">cdid</tt> command, which
          calculates and displays the CD serial number, using the
          same algorithm used by the CDDB database. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=cdcontrol&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">cdcontrol</span>(1)</span></a> now uses
          the <tt class="ENVAR">CDROM</tt> environment variable to
          pick a default device. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=cdcontrol&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">cdcontrol</span>(1)</span></a> now
          supports <tt class="LITERAL">next</tt> and <tt class=
          "LITERAL">prev</tt> commands to skip forwards or
          backwards a specified number of tracks while playing an
          audio CD. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=chflags&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">chflags</span>(1)</span></a> has moved
          from <tt class="FILENAME">/usr/bin</tt> to <tt class=
          "FILENAME">/bin</tt>.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=chio&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">chio</span>(1)</span></a> now has the
          ability to specify elements by volume tag instead of by
          their physical location as well as the ability to return
          an element to its previous location. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=chmod&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">chmod</span>(1)</span></a> now supports a
          <tt class="OPTION">-h</tt> for changing the mode of a
          symbolic link.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=chown&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">chown</span>(8)</span></a> now correctly
          follows symbolic links named as command line arguments if
          run without <tt class="OPTION">-R</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=chown&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">chown</span>(8)</span></a> no longer
          takes <tt class="LITERAL">.</tt> as a user/group
          delimeter. This change was made to support usernames
          containing a <tt class="LITERAL">.</tt>.</p>

          <p>Use of the <tt class="LITERAL">CSMG_*</tt> macros no
          longer require inclusion of <tt class=
          "FILENAME">&lt;sys/param.h&gt;</tt></p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=col&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">col</span>(1)</span></a> now takes a <tt
          class="OPTION">-p</tt> flag to force unknown control
          sequences to be passed through unchanged. [MERGED]</p>

          <p>The <tt class="FILENAME">compat3x</tt> distribution
          has been updated to include libraries present in FreeBSD
          3.5.1-RELEASE. [MERGED]</p>

          <p>A <tt class="FILENAME">compat4x</tt> distribution has
          been added for compatibility with FreeBSD 4-STABLE.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=config&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">config</span>(8)</span></a> is now better
          about converting various warnings that should have been
          errors into actual fatal errors with an exit code. This
          ensures that <tt class="LITERAL">make buildkernel</tt>
          doesn't quietly ignore them and build a bogus kernel
          without a human to read the errors. [MERGED]</p>

          <p>A number of buffer overflows in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=config&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">config</span>(8)</span></a> have been
          fixed. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ctags&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ctags</span>(1)</span></a> no longer
          creates a corrupt tags file if the source file used <tt
          class="LITERAL">//</tt> (C++-style) comments.
          [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=daemon&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">daemon</span>(8)</span></a> program, a
          command-line interface to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=daemon&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">daemon</span>(3)</span></a>, has been
          added. It detaches itself from its controlling terminal
          and executes a program specified on the command line.
          This allows the user to run an arbitrary program as if it
          were written to be a daemon.</p>

          <p>devinfo, a simple tool to print the device tree and
          resource usage by devices, has been added.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=df&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">df</span>(1)</span></a> now takes a <tt
          class="OPTION">-l</tt> option to only display information
          about locally-mounted filesystems. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=disklabel&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">disklabel</span>(8)</span></a> now
          supports partition sizes expressed in kilobytes,
          megabytes, or gigabytes, in addition to sectors.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dmesg&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dmesg</span>(8)</span></a> now has a <tt
          class="OPTION">-a</tt> option to show the entire message
          buffer, including <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syslogd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syslogd</span>(8)</span></a> records and
          <tt class="FILENAME">/dev/console</tt> output.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=du&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">du</span>(1)</span></a> now takes a <tt
          class="OPTION">-I</tt> command-line flag to ignore/skip
          files and subdirectories matching a specified shell-glob
          mask. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dump&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dump</span>(8)</span></a> now supports
          inheritance of the <tt class="LITERAL">nodump</tt> flag
          down a hierarchy. [MERGED]</p>

          <p>The <tt class="OPTION">-T</tt> option to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dump&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dump</span>(8)</span></a> no longer
          swallows an extra argument. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dump&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dump</span>(8)</span></a> has a new <tt
          class="OPTION">-D</tt> option, allowing the path to the
          <tt class="FILENAME">/etc/dumpdates</tt> file to be
          changed. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dump&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dump</span>(8)</span></a> now supplies
          progress information in its process title, useful for
          monitoring automated backups. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dump&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dump</span>(8)</span></a> now supports a
          new <tt class="OPTION">-S</tt> to allow it to just print
          out the dump size estimates and exit.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=edquota&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">edquota</span>(8)</span></a> now takes a
          <tt class="OPTION">-f</tt> option to allow limiting the
          prototype quota distribution (specified with <tt class=
          "OPTION">-p</tt>) to a single filesystem. [MERGED]</p>

          <p><tt class="FILENAME">/etc/rc.firewall</tt> and <tt
          class="FILENAME">/etc/rc.firewall6</tt> will no longer
          add their own hardcoded rules in the cases of a rules
          file in the <tt class="VARNAME">firewall_type</tt>
          variable or a non-existent firewall type. (The motivation
          for this change is to avoid acting on assumptions about a
          site's firewall policies.) In addition, the <tt class=
          "LITERAL">closed</tt> firewall type now works as
          documented in the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rc.firewall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rc.firewall</span>(8)</span></a> manual
          page. [MERGED]</p>

          <p>The functionality of <tt class=
          "FILENAME">/etc/security</tt> has been been moved into a
          set of scripts under the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=periodic&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">periodic</span>(8)</span></a> framework,
          to make local customization easier and more maintainable.
          These scripts now reside in <tt class=
          "FILENAME">/etc/periodic/security/</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fbtab&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fbtab</span>(5)</span></a> now accepts
          glob matching patterns for target devices, not just
          individual devices and directories.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fdisk&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fdisk</span>(8)</span></a> no longer
          attempts to search for a device if none has been
          specified on the command line, but instead tries to
          figure out the default device name from the root
          device.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fdread&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fdread</span>(1)</span></a>, a program to
          read data from floppy disks, has been added. It is a
          counterpart to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fdwrite&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fdwrite</span>(1)</span></a> and is
          designed to provide a means of recovering at least some
          data from bad media, and to obviate for a complex
          invocation of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dd&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dd</span>(1)</span></a>.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=find&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">find</span>(1)</span></a> now takes the
          <tt class="OPTION">-empty</tt> flag, which returns true
          if a file or directory is empty. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=find&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">find</span>(1)</span></a> now takes the
          <tt class="OPTION">-iname</tt> and <tt class=
          "OPTION">-ipath</tt> primaries for case-insensitive
          matches, and the <tt class="OPTION">-regexp</tt> and <tt
          class="OPTION">-iregexp</tt> primaries for
          regular-expression matches. The <tt class=
          "OPTION">-E</tt> flag now enables extended regular
          expressions. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=find&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">find</span>(1)</span></a> now has the <tt
          class="OPTION">-anewer</tt>, <tt class=
          "OPTION">-cnewer</tt>, <tt class="OPTION">-mnewer</tt>,
          <tt class="OPTION">-okdir</tt>, and <tt class=
          "OPTION">-newer[acm][acmt]</tt> primaries for comparisons
          of file timestamps. The latter primaries can be specified
          with various units of time. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=finger&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">finger</span>(1)</span></a> now has the
          ability to support fingering aliases, via the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=finger.conf&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">finger.conf</span>(5)</span></a> file.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=finger&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">finger</span>(1)</span></a> now has
          support for a <tt class="FILENAME">.pubkey</tt> file.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fmt&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fmt</span>(1)</span></a> has been
          rewritten; the rewrite fixes a number of bugs compared to
          its prior behavior. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fmtcheck&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fmtcheck</span>(3)</span></a>, a function
          for checking consistency of format string arguments, has
          been added. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck</span>(8)</span></a> wrappers have
          been imported; this feature provides infrastructure for
          <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck</span>(8)</span></a> to work on
          different types of filesystems (analogous to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mount&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mount</span>(8)</span></a>).</p>

          <p>The behavior of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck</span>(8)</span></a> when dealing
          with various passes (a la <tt class=
          "FILENAME">/etc/fstab</tt>) has been modified to
          accommodate multiple-disk filesystems.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck</span>(8)</span></a> now has support
          for foreground (<tt class="OPTION">-F</tt>) and
          background (<tt class="OPTION">-B</tt>) checks.
          Traditionally, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck</span>(8)</span></a> is invoked
          before the filesystems are mounted and all checks are
          done to completion at that time. If background checking
          is available, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck</span>(8)</span></a> is invoked
          twice. It is first invoked at the traditional time,
          before the filesystems are mounted, with the <tt class=
          "OPTION">-F</tt> flag to do checking on all the
          filesystems that cannot do background checking. It is
          then invoked a second time, after the system has
          completed going multiuser, with the <tt class=
          "OPTION">-B</tt> flag to do checking on all the
          filesystems that can do background checking. Unlike the
          foreground checking, the background checking is started
          asynchronously so that other system activity can proceed
          even on the filesystems that are being checked. Boot-time
          enabling of this feature is controlled by the <tt class=
          "VARNAME">background_fsck</tt> option in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rc.conf&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rc.conf</span>(5)</span></a>.</p>

          <p>Shortly after the receipt of a <tt class=
          "LITERAL">SIGINFO</tt> signal (normally control-T from
          the controlling tty), <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck_ffs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck_ffs</span>(8)</span></a> will now
          output a line indicating the current phase number and
          progress information relevant to the current phase.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck_ffs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck_ffs</span>(8)</span></a> now
          supports background filesystem checks to mounted FFS
          filesystems with the <tt class="OPTION">-B</tt> option
          (softupdates must be enabled on these filesystems). The
          <tt class="OPTION">-F</tt> flag now determines whether a
          specified filesystem needs foreground checking.</p>

          <p>A new <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck_msdosfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck_msdosfs</span>(8)</span></a> utility
          has been added to check the consistency of MS-DOS
          filesystems. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ftpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ftpd</span>(8)</span></a> now supports a
          <tt class="OPTION">-r</tt> flag for read-only mode and a
          <tt class="OPTION">-E</tt> flag to disable <tt class=
          "LITERAL">EPSV</tt>. It also has some fixes to reduce
          information leakage and the ability to specify
          compile-time port ranges. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ftpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ftpd</span>(8)</span></a> now supports
          <tt class="OPTION">-o</tt> and <tt class="OPTION">-O</tt>
          options to disable the <tt class="LITERAL">RETR</tt>
          command; the former for everybody, and the latter only
          for guest users. Coupled with <tt class="OPTION">-A</tt>
          and appropriate file permissions, these can be used to
          create a relatively safe anonymous FTP drop box for
          others to upload to.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gdb&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gdb</span>(1)</span></a> now supports
          hardware watchpoints (using the kernel's debug register +
          support that has been introduced in FreeBSD 4.0).
          [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=getprogname&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">getprogname</span>(3)</span></a> and <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=setprogname&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">setprogname</span>(3)</span></a> library
          functions have been added to manipulate the name of the
          current program. They are used by error-reporting
          routines to produce consistent output. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gprof&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gprof</span>(1)</span></a> now has a <tt
          class="OPTION">-K</tt> option to enable dynamic symbol
          resolution from the currently-running kernel. With this
          change, properly-compiled KLD modules are now able to be
          profiled.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=growfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">growfs</span>(8)</span></a>, a utility
          for growing FFS filesystems, has been added. <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ffsinfo&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ffsinfo</span>(8)</span></a>, a utility
          for dump all the meta-information of an existing
          filesystem, has also been added. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=groups&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">groups</span>(1)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=whoami&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">whoami</span>(1)</span></a> shell scripts
          are now unnecessary; their functionality has been
          completely folded into <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=id&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">id</span>(1)</span></a>. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ibcs2&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ibcs2</span>(8)</span></a>, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=linux&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">linux</span>(8)</span></a>, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=osf1&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">osf1</span>(8)</span></a>, and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=svr4&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">svr4</span>(8)</span></a> scripts, whose
          sole purpose was to load emulation kernel modules, have
          been removed. The kernel module system will automatically
          load them as needed to fulfill dependencies.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=indent&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">indent</span>(1)</span></a> has gained
          some new formatting options. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ifconfig</span>(8)</span></a> command can
          set the link-layer address of an interface using the <tt
          class="OPTION">lladdr</tt> parameter. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ifconfig</span>(8)</span></a> can now
          accept addresses in slash/CIDR notation. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ifconfig</span>(8)</span></a> now has
          support for setting parameters for IEEE 802.11 wireless
          network devices. <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=wi&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">wi</span>(4)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=an&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">an</span>(4)</span></a> devices are
          supported, and partial support is provided for <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=awi&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">awi</span>(4)</span></a> devices.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ifconfig</span>(8)</span></a> no longer
          displays the list of supported media by default. Instead
          it displays it when the <tt class="OPTION">-m</tt> flag
          is given. [MERGED]</p>

          <p>The syntax of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=inetd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">inetd</span>(8)</span></a>'s support for
          <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=faithd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">faithd</span>(8)</span></a> is now
          compatible with that of other BSDs. [MERGED]</p>

          <p>The <tt class="LITERAL">ident</tt> protocol support in
          <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=inetd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">inetd</span>(8)</span></a> has been
          cleaned up and updated. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=inetd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">inetd</span>(8)</span></a> now has the
          ability to manage UNIX-domain sockets. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=install&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">install</span>(1)</span></a> has a number
          of new features, including the <tt class="OPTION">-b</tt>
          and <tt class="OPTION">-B</tt> options for backing up
          existing target files and the <tt class="OPTION">-S</tt>
          option for ``safe'' (atomic copy) operation. The <tt
          class="OPTION">-c</tt> (copy) flag is now the default,
          and the <tt class="OPTION">-D</tt> (debugging) flag has
          been withdrawn. <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=install&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">install</span>(1)</span></a> now issues a
          warning if <tt class="OPTION">-d</tt> (create
          directories) and <tt class="OPTION">-C</tt> (copy changed
          files only) are used together. [MERGED]</p>

          <p>IP Filter is now supported by the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rc.conf&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rc.conf</span>(5)</span></a> boot-time
          configuration and initialization. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfstat&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfstat</span>(8)</span></a> now supports
          the <tt class="OPTION">-t</tt> option to turn on a <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=top&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">top</span>(1)</span></a>-like display.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfw</span>(8)</span></a> will now avoid
          the display of dynamic firewall rules unless the <tt
          class="OPTION">-d</tt> flag is passed to it. The <tt
          class="OPTION">-e</tt> option lists expired dynamic
          rules. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfw</span>(8)</span></a> has a new
          feature (<tt class="LITERAL">me</tt>) that allows for
          packet matching on interfaces with dynamically-changing
          IP addresses. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfw</span>(8)</span></a> has a new <tt
          class="LITERAL">limit</tt> type of firewall rule, which
          limits the number of sessions between address pairs.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfw</span>(8)</span></a> filter rules
          can now match on the value of the IPv4 precedence
          field.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ip6fw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ip6fw</span>(8)</span></a> now has the
          ability to use a preprocessor and use the <tt class=
          "OPTION">-q</tt> (quiet) flag when reading from a file.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=kenv&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">kenv</span>(1)</span></a>, a command to
          dump the kernel environment, has been added. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=keyinfo&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">keyinfo</span>(1)</span></a> is now a C
          program, rather than a Perl script. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=killall&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">killall</span>(1)</span></a> is now a C
          program, rather than a Perl script. As a result, its <tt
          class="OPTION">-m</tt> option now uses the regular
          expression syntax of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=regex&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">regex</span>(3)</span></a>, rather than
          that of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=perl&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">perl</span>(1)</span></a>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=killall&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">killall</span>(1)</span></a> now allows
          non-root users to kill SUID root processes that they
          started, the same as the Perl version did. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=kldconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">kldconfig</span>(8)</span></a> utility
          has been added to make it easier to manipulate the kernel
          module search path. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=last&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">last</span>(1)</span></a> now implements
          a <tt class="OPTION">-d</tt> that provides a ``snapshot''
          of who was logged in at a particular date and time.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=last&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">last</span>(1)</span></a> now supports a
          <tt class="OPTION">-y</tt> flag, which causes the year to
          be included in the session start time.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lastlogin&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lastlogin</span>(8)</span></a> utility,
          which prints the last login time of each user, has been
          imported from NetBSD. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ldconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ldconfig</span>(8)</span></a> now checks
          directory ownerships and permissions for greater
          security; these checks can be disabled with the <tt
          class="OPTION">-i</tt> flag. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ldd&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ldd</span>(1)</span></a> can now be used
          on shared libraries, in addition to executables.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ldd&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ldd</span>(1)</span></a> now supports a
          <tt class="OPTION">-a</tt> flag to list all the objects
          that are needed by each loaded object.</p>

          <p><tt class="FILENAME">libc</tt> is now thread-safe by
          default; <tt class="FILENAME">libc_r</tt> contains only
          thread functions.</p>

          <p><tt class="FILENAME">libcrypt</tt> and <tt class=
          "FILENAME">libdescrypt</tt> have been unified to provide
          a configurable password authentication hash library. Both
          the md5 and des hash methods are provided unless the des
          hash is specifically compiled out. [MERGED]</p>

          <p><tt class="FILENAME">libcrypt</tt> now has support for
          Blowfish password hashing. [MERGED]</p>

          <p><tt class="FILENAME">libdisk</tt> can now do
          install-time configuration of the <tt class=
          "FILENAME">boot0</tt> boot loader. [MERGED]</p>

          <p><tt class="FILENAME">libstand</tt> now has support for
          filesystems containing <b class=
          "APPLICATION">bzip2</b>-compressed files. [MERGED]</p>

          <p><tt class="FILENAME">libstand</tt> now has support for
          overwriting the contents of a file on a UFS filesystem
          (it cannot expand or truncate files because the
          filesystem may be dirty or inconsistent).</p>

          <p>The default TCP port range used by <tt class=
          "FILENAME">libfetch</tt> for passive FTP retrievals has
          changed; this affects the behavior of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fetch&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fetch</span>(1)</span></a>, which has
          gained the <tt class="OPTION">-U</tt> option to restore
          the old behavior. [MERGED]</p>

          <p><tt class="FILENAME">libfetch</tt> now has support for
          an authentication callback. [MERGED]</p>

          <p><tt class="FILENAME">libfetch</tt> now has support for
          a <tt class="ENVAR">HTTP_USER_AGENT</tt> environment
          variable. [MERGED]</p>

          <p><tt class="FILENAME">libgmp</tt> has been superceded
          by <tt class="FILENAME">libmp</tt>.</p>

          <p>The functions from <tt class=
          "FILENAME">libposix1e</tt> have been integrated into <tt
          class="FILENAME">libc</tt>.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ln&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ln</span>(1)</span></a> now takes an <tt
          class="OPTION">-i</tt> option to request user
          confirmation before overwriting an existing file.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ln&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ln</span>(1)</span></a> now takes a <tt
          class="OPTION">-h</tt> flag to avoid following a target
          that is a link, with a <tt class="OPTION">-n</tt> flag
          for compatibility with other implementations.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=logger&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">logger</span>(1)</span></a> can now send
          messages directly to a remote syslog. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=login&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">login</span>(1)</span></a> now exports
          environment variables set by <b class=
          "APPLICATION">PAM</b> modules. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpc&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpc</span>(8)</span></a> has been
          improved; <tt class="COMMAND">lpc clean</tt> is now
          somewhat safer, and a new <tt class="COMMAND">lpc
          tclean</tt> command has been added to check to see what
          files would be removed by <tt class="COMMAND">lpc
          clean</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpd</span>(8)</span></a> now takes two
          new options: <tt class="OPTION">-c</tt> will log all
          connection errors to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syslogd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syslogd</span>(8)</span></a>, while <tt
          class="OPTION">-W</tt> will allow connections from
          non-reserved ports. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpd</span>(8)</span></a> now has some
          support for <tt class="LITERAL">o</tt>-type print-file
          actions in its control files, which allows printing of
          PostScript files generated by <b class=
          "APPLICATION">MacOS</b> 10.1. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpr&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpr</span>(1)</span></a>, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpq&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpq</span>(1)</span></a>, and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpd</span>(8)</span></a> have received a
          few minor enhancements. [MERGED]</p>

          <p>Catching up with most other network utilities in the
          base system, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpr&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpr</span>(1)</span></a>, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=lpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">lpd</span>(8)</span></a>, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syslogd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syslogd</span>(8)</span></a>, and <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=logger&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">logger</span>(1)</span></a> are now all
          IPv6-capable. [MERGED]</p>

          <p><tt class="COMMAND">lprm -</tt> now works for remote
          printer queues. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ls&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ls</span>(1)</span></a> can produce
          colorized listings with the <tt class="OPTION">-G</tt>
          flag (and appropriate terminal support). The <tt class=
          "ENVAR">CLICOLOR</tt> environment variable can be set to
          enable colorized listings by default. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mail&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mail</span>(1)</span></a> now takes a <tt
          class="OPTION">-E</tt> flag to avoid sending messages
          with empty bodies. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=make&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">make</span>(1)</span></a> has gained the
          <tt class="LITERAL">:C///</tt> (regular expression
          substitution), <tt class="LITERAL">:L</tt> (lowercase),
          and <tt class="LITERAL">:U</tt> (uppercase) variable
          modifiers. These were added to reduce the differences
          between the FreeBSD and OpenBSD/NetBSD <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=make&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">make</span>(1)</span></a> programs.
          [MERGED]</p>

          <p>Bugs in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=make&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">make</span>(1)</span></a>, among which
          include broken null suffix behavior, bad assumptions
          about current directory permissions, and potential buffer
          overflows, have been fixed. [MERGED]</p>

          <p>The new <tt class="VARNAME">CPUTYPE</tt> <tt class=
          "FILENAME">make.conf</tt> variable controls the
          compilation of processor-specific optimizations in
          various pieces of code such as <b class=
          "APPLICATION">OpenSSL</b>. [MERGED]</p>

          <p>The FreeBSD <tt class="FILENAME">Makefile</tt>
          infrastructure now supports the <tt class=
          "VARNAME">WARNS</tt> directive from NetBSD. This
          directive controls the addition of compiler warning flags
          to <tt class="VARNAME">CFLAGS</tt> in a relatively
          compiler-neutral manner. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=man&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">man</span>(1)</span></a> is no longer
          installed SUID <tt class="USERNAME">man</tt>, in order to
          reduce vulnerabilities associated with generating
          ``catpages'' (preformatted manual pages cached for
          repeated viewing). As a result, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=man&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">man</span>(1)</span></a> can no longer
          create system catpages on a regular user's behalf. It is
          still able to do so if the user has write permissions to
          the directory holding catpages (e.g. a user's own
          manpages) or if the running user is <tt class=
          "USERNAME">root</tt>.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mdmfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mdmfs</span>(8)</span></a> command has
          been added; it is a wrapper around <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mdconfig&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mdconfig</span>(8)</span></a>, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=disklabel&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">disklabel</span>(8)</span></a>, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=newfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">newfs</span>(8)</span></a>, and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mount&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mount</span>(8)</span></a> that mimics
          the command line option set of the deprecated <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mount_mfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mount_mfs</span>(8)</span></a>.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mergemaster&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mergemaster</span>(8)</span></a> now
          sources an <tt class="FILENAME">/etc/mergemaster.rc</tt>
          file and also prompts the user to run recommended
          commands (such as <tt class="COMMAND">newaliases</tt>) as
          needed. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=moused&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">moused</span>(8)</span></a> now takes a
          <tt class="OPTION">-a</tt> option to control mouse
          acceleration. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mtree&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mtree</span>(8)</span></a> now includes
          support for a file that lists pathnames to be excluded
          when creating and verifying prototypes. This makes it
          easier to use <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=mtree&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">mtree</span>(8)</span></a> as a part of
          an intrusion-detection system. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=natd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">natd</span>(8)</span></a> now supports a
          <tt class="OPTION">-log_ipfw_denied</tt> option to log
          packets that cannot be re-injected because they are
          blocked by <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ipfw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ipfw</span>(8)</span></a> rules.
          [MERGED]</p>

          <p>The ``in use'' percentage metric displayed by <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=netstat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">netstat</span>(1)</span></a> now really
          reflects the percentage of network mbufs used.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=netstat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">netstat</span>(1)</span></a> now has a
          <tt class="OPTION">-W</tt> flag that tells it not to
          truncate addresses, even if they're too long for the
          column they're printed in. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=netstat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">netstat</span>(1)</span></a> now keeps
          track of input and output packets on a per-address basis
          for each interface. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=netstat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">netstat</span>(1)</span></a> now has a
          <tt class="OPTION">-z</tt> flag to reset statistics.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=netstat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">netstat</span>(1)</span></a> now has a
          <tt class="OPTION">-S</tt> flag to print address
          numerically but port names symbolically. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=newfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">newfs</span>(8)</span></a> now implements
          write combining, which can make creation of new
          filesystems up to seven times faster. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=newfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">newfs</span>(8)</span></a> now takes a
          <tt class="OPTION">-U</tt> option to enable softupdates
          on a new filesystem. [MERGED]</p>

          <p>The default number of cylinders per group in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=newfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">newfs</span>(8)</span></a> is now
          computed to be the maximum allowable given the current
          filesystem parameters. It can be overridden with the <tt
          class="OPTION">-c</tt> option. Formerly, the default was
          fixed at 16. This change leads to better <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=fsck&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">fsck</span>(8)</span></a> performance and
          reduced fragmentation. [MERGED]</p>

          <p><a name="NEWFS-BLOCK-FRAG-SIZES"></a>The default block
          and fragment sizes for new filesystems created by <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=newfs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">newfs</span>(8)</span></a> are now 16384
          and 2048 bytes, respectively (the old defaults were 8192
          and 1024 bytes). This change generally provides increased
          performance, at the expense of some wasted disk space.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=newsyslog&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">newsyslog</span>(8)</span></a> now has
          the ability to compress log files using <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=bzip2&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">bzip2</span>(1)</span></a>. [MERGED]</p>

          <p><b class="APPLICATION">NFS</b> now works over
          IPv6.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ngctl&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ngctl</span>(8)</span></a> now supports a
          <tt class="OPTION">write</tt> command to send a data
          packet down a given hook. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=nl&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">nl</span>(1)</span></a>, a line numbering
          filter program, has been added. [MERGED]</p>

          <p><b class="APPLICATION">nsswitch</b> support has been
          merged from NetBSD. By creating an <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=nsswitch.conf&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">nsswitch.conf</span>(5)</span></a> file,
          FreeBSD can be configured so that various databases such
          as <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=passwd&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">passwd</span>(5)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=group&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">group</span>(5)</span></a> can be looked
          up using flat files, NIS, or Hesiod. The old <tt class=
          "FILENAME">hosts.conf</tt> file is no longer used.</p>

          <p><b class="APPLICATION">PAM</b> support has been added
          for account management and sessions.</p>

          <p><b class="APPLICATION">PAM</b> configuration is now
          specified by files in <tt class=
          "FILENAME">/etc/pam.d/</tt>, rather than a single <tt
          class="FILENAME">/etc/pam.conf</tt> file. <tt class=
          "FILENAME">/etc/pam.d/README</tt> has more details.</p>

          <p>A number of new <b class="APPLICATION">PAM</b> modules
          have been added.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=passwd&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">passwd</span>(1)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pw&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pw</span>(8)</span></a> now select the
          password hash algorithm at run time. See the <tt class=
          "LITERAL">passwd_format</tt> attribute in <tt class=
          "FILENAME">/etc/login.conf</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pax&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pax</span>(1)</span></a> has received a
          number of enhancements, including <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=cpio&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">cpio</span>(1)</span></a> functionality,
          <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tar&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tar</span>(1)</span></a> compatibility
          enhancements, <tt class="OPTION">-z</tt> and <tt class=
          "OPTION">-Z</tt> flags for <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gzip&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gzip</span>(1)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=compress&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">compress</span>(1)</span></a>
          functionality, and a number of bug fixes.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pciconf&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pciconf</span>(8)</span></a> now supports
          a <tt class="OPTION">-v</tt> option to display the
          vendor/device information of configured devices, in
          conjunction with the <tt class="OPTION">-l</tt> option.
          The default vendor/device database can be found at <tt
          class="FILENAME">/usr/share/misc/pci_vendors</tt>.
          [MERGED]</p>

          <p>The behavior of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=periodic&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">periodic</span>(8)</span></a> is now
          controlled by <tt class=
          "FILENAME">/etc/defaults/periodic.conf</tt> and <tt
          class="FILENAME">/etc/periodic.conf</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ping&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ping</span>(8)</span></a> now supports a
          <tt class="OPTION">-m</tt> option to set the TTL of
          outgoing packets. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ping&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ping</span>(8)</span></a> now supports a
          <tt class="OPTION">-A</tt> option to beep when packets
          are lost. [MERGED]</p>

          <p>Userland <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ppp&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ppp</span>(8)</span></a> has received a
          number of updates and bug fixes. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ppp&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ppp</span>(8)</span></a> has gained the
          <tt class="LITERAL">tcpmssfixup</tt> option, which
          adjusts outgoing and incoming TCP SYN packets so that the
          maximum receive segment size is no larger than allowed by
          the interface MTU. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ppp&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ppp</span>(8)</span></a> now supports
          IPv6.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pppd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pppd</span>(8)</span></a> (the control
          program for kernel-level PPP) is now installed mode <tt
          class="LITERAL">4550</tt> and <tt class=
          "USERNAME">root</tt><tt class="LITERAL">:</tt><tt class=
          "GROUPNAME">dialer</tt>, rather than mode <tt class=
          "LITERAL">4555</tt> (in other words, it is no longer
          world-executable). Users of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pppd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pppd</span>(8)</span></a> may need to
          change their group settings. [MERGED]</p>

          <p>The <tt class="OPTION">-W</tt> option to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ps&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ps</span>(1)</span></a> (to extract
          information from a specified swap device) has been
          useless for some time; it has been removed. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=pwd&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">pwd</span>(1)</span></a> can now double
          as <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=realpath&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">realpath</span>(1)</span></a>, a program
          to resolve pathnames to their underlying physical paths.
          [MERGED]</p>

          <p>The pseudo-random number generator implemented by <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rand&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rand</span>(3)</span></a> has been
          improved to provide less biased results.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rc&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rc</span>(8)</span></a> now has an
          framework for handling dependencies between <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rc.conf&sektion=5&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rc.conf</span>(5)</span></a> variables.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rc&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rc</span>(8)</span></a> now deletes all
          non-directory files in <tt class="FILENAME">/var/run</tt>
          and <tt class="FILENAME">/var/spool/lock</tt> at boot
          time. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rcmd&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rcmd</span>(3)</span></a> now supports
          the use of the <tt class="ENVAR">RSH</tt> environment
          variable to specify a program to use other than <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rsh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rsh</span>(1)</span></a> for remote
          execution. As a result, programs such as <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=dump&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">dump</span>(8)</span></a>, can use <a
          href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ssh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ssh</span>(1)</span></a> for remote
          transport.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rdist&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rdist</span>(1)</span></a> has been
          retired from the base system, but is still available from
          FreeBSD Ports Collection as <a href=
          "http://www.FreeBSD.org/cgi/url.cgi?ports/net/44bsd-rdist/pkg-descr">
          <tt class="FILENAME">net/44bsd-rdist</tt></a>.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=resolver&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">resolver</span>(3)</span></a> in FreeBSD
          now implements EDNS0 support, which will be necessary
          when working with IPv6 transport-ready resolvers/DNS
          servers. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rfork_thread&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rfork_thread</span>(3)</span></a> library
          call has been added as a helper function to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rfork&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rfork</span>(2)</span></a>. Using this
          function should avoid the need to implement complex stack
          swap code. [MERGED]</p>

          <p>The <tt class="OPTION">-v</tt> option to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rm&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rm</span>(1)</span></a> now displays the
          entire pathname of a file being removed.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=route&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">route</span>(8)</span></a> is now more
          verbose when changing indirect routes, in the case of a
          gateway route that is the same route as the one being
          modified. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=route&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">route</span>(8)</span></a> now uses <tt
          class="LITERAL"><tt class=
          "REPLACEABLE"><i>host</i></tt>/<tt class=
          "REPLACEABLE"><i>bits</i></tt></tt> syntax instead of <tt
          class="LITERAL"><tt class=
          "REPLACEABLE"><i>net</i></tt>/<tt class=
          "REPLACEABLE"><i>bits</i></tt></tt> syntax, for
          compatibility with <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=netstat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">netstat</span>(1)</span></a>.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=route&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">route</span>(8)</span></a> can now create
          ``proxy only'' published ARP entries. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=route&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">route</span>(8)</span></a> <tt class=
          "OPTION">add</tt> command now supports the <tt class=
          "OPTION">-ifp</tt> and <tt class="OPTION">-ifa</tt>
          modifiers. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rpcbind&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rpcbind</span>(8)</span></a> has replaced
          <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=portmap&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">portmap</span>(8)</span></a>.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rpcgen&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rpcgen</span>(1)</span></a> now uses <tt
          class="FILENAME">/usr/bin/cpp</tt> (as on NetBSD), not
          <tt class="FILENAME">/usr/libexec/cpp</tt>.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rpc.lockd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rpc.lockd</span>(8)</span></a> has been
          imported from NetBSD. This daemon provides support for
          servicing client NFS locks.</p>

          <p>The performance of the ELF dynamic linker <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rtld&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rtld</span>(1)</span></a> has been
          improved. [MERGED]</p>

          <p>RSA Security has waived all patent rights to the <b
          class="APPLICATION">RSA</b> algorithm. As a result, the
          native <b class="APPLICATION">OpenSSL</b> implementation
          of the RSA algorithm is now activated by default, and the
          <a href=
          "http://www.FreeBSD.org/cgi/url.cgi?ports/security/rsaref/pkg-descr">
          <tt class="FILENAME">security/rsaref</tt></a> port and
          the <tt class="FILENAME">librsaUSA</tt> and <tt class=
          "FILENAME">librsaINTL</tt> libraries are no longer
          required for USA and non-USA residents respectively.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=rtld&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">rtld</span>(1)</span></a> will now print
          the names of all objects that cause each object to be
          loaded, if the <tt class=
          "VARNAME">LD_TRACE_LOADED_OBJECTS_ALL</tt> environment
          variable is defined.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=savecore&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">savecore</span>(8)</span></a> now
          supports a <tt class="OPTION">-k</tt> option to prevent
          clearing a crash dump after saving it. It also attempts
          to avoid writing large stretches of zeros to crash dump
          files to save space and time. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=savecore&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">savecore</span>(8)</span></a> now works
          correctly on machines with 2 GB or more of RAM.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sed&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sed</span>(1)</span></a> now takes a <tt
          class="OPTION">-E</tt> option for extended regular
          expression support. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=send-pr&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">send-pr</span>(1)</span></a> now takes a
          <tt class="OPTION">-a</tt> option to include a file into
          the <tt class="LITERAL">Fix:</tt> section of a problem
          report. [MERGED]</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=setfacl&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">setfacl</span>(1)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=getfacl&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">getfacl</span>(1)</span></a> commands
          have been added to manage filesystem Access Control
          Lists.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=setproctitle&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">setproctitle</span>(3)</span></a> has
          been moved from <tt class="FILENAME">libutil</tt> to <tt
          class="FILENAME">libc</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sh</span>(1)</span></a> now implements
          <tt class="COMMAND">test</tt> as a built-in command for
          improved efficiency. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sh</span>(1)</span></a> no longer
          implements <tt class="COMMAND">printf</tt> as a built-in
          command because it was considered less valuable compared
          to the other built-in commands (this functionality is, of
          course, still available through the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=printf&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">printf</span>(1)</span></a>
          executable).</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sockstat&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sockstat</span>(1)</span></a> now has <tt
          class="OPTION">-c</tt> and <tt class="OPTION">-l</tt>
          flags for listing connected and listening sockets,
          respectively. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=split&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">split</span>(1)</span></a> now has the
          ability to split a file longer than 2GB. [MERGED]</p>

          <p>In preparation for meeting SUSv2/POSIX <tt class=
          "FILENAME">&lt;sys/select.h&gt;</tt> requirements, <tt
          class="LITERAL">struct selinfo</tt> and related functions
          have been moved to <tt class=
          "FILENAME">&lt;sys/selinfo.h&gt;</tt>.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=strnstr&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">strnstr</span>(3)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=strcasestr&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">strcasestr</span>(3)</span></a> variants
          of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=strstr&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">strstr</span>(3)</span></a> have been
          implemented. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=stty&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">stty</span>(1)</span></a> now has support
          for an <tt class="LITERAL">erase2</tt> control character,
          so that, for example, both the <b class=
          "KEYCAP">Delete</b> and <b class="KEYCAP">Backspace</b>
          keys can be used to erase characters. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=style.perl&sektion=7&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">style.perl</span>(7)</span></a>, a style
          guide for Perl code in the FreeBSD base system, has been
          added. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=su&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">su</span>(1)</span></a> now uses <b
          class="APPLICATION">PAM</b> for authentication.</p>

          <p>Boot-time <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syscons&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syscons</span>(4)</span></a>
          configuration was moved to a machine-independent <tt
          class="FILENAME">/etc/rc.syscons</tt>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysctl</span>(8)</span></a> now supports
          a <tt class="OPTION">-N</tt> option to print out variable
          names only. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysctl</span>(8)</span></a> has replaced
          the <tt class="OPTION">-A</tt> and <tt class=
          "OPTION">-X</tt> options with <tt class="OPTION">-ao</tt>
          and <tt class="OPTION">-ax</tt> respectively; the former
          options are now deprecated. The <tt class=
          "OPTION">-w</tt> option is deprecated as well; it is not
          needed to determine the user's intentions. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysctl</span>(8)</span></a> now supports
          a <tt class="OPTION">-e</tt> option to separate variable
          names and values by <tt class="LITERAL">=</tt> rather
          than <tt class="LITERAL">:</tt>. This feature is useful
          for producing output that can be fed back to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysctl</span>(8)</span></a>. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> now
          properly preserves <tt class="FILENAME">/etc/mail</tt>
          during a binary upgrade. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> now uses
          some more intuitive defaults thanks to some new dialog
          support functions. [MERGED]</p>

          <p>The default root partition in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> is now
          100MB on the i386 and 120MB on the Alpha.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> now lives
          in <tt class="FILENAME">/usr/sbin</tt>, which simplifies
          the installation process. The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> manpage
          is also installed in a more consistent fashion now.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> now has
          the ability to load KLDs as a part of the installation.
          [MERGED]</p>

          <p>When run from the installation media, <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> will
          automatically load any device drivers found in the <tt
          class="FILENAME">/stand/modules</tt> directory of the <tt
          class="LITERAL">mfsroot</tt> floppy or filesystem image.
          Note that any drivers so loaded will not appear in the
          kernel's boot messages; the <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> debugging
          screen will provide additional information. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> now
          enables Soft Updates by default on all filesystems it
          creates, except for the root filesystem. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">sysinstall</span>(8)</span></a> has
          received updates for its ``auto'' partitioning mode which
          provide more reasonable defaults for the sizes of
          partitions that are created; auto-sized partitions can
          now also recover the space that becomes available when
          other partitions are deleted. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syslogd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syslogd</span>(8)</span></a> can take a
          <tt class="OPTION">-n</tt> option to disable DNS queries
          for every request. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syslogd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syslogd</span>(8)</span></a> now supports
          a <tt class="LITERAL">LOG_CONSOLE</tt> facility (disabled
          by default), which can be used to log <tt class=
          "FILENAME">/dev/console</tt> output. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syslogd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syslogd</span>(8)</span></a> now has the
          ability to bind to a specific address (as opposed to
          using every available one) via the <tt class=
          "OPTION">-b</tt> option. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syslogd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syslogd</span>(8)</span></a> now accepts
          a <tt class="OPTION">-c</tt> flag to disable repeated
          line compression. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tail&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tail</span>(1)</span></a> now has the
          ability to work on files longer than 2GB. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tar&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tar</span>(1)</span></a> now supports the
          <tt class="VARNAME">TAR_RSH</tt> variable, principally to
          enable the use of <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=ssh&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">ssh</span>(1)</span></a> as a transport.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=telnet&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">telnet</span>(1)</span></a> now does
          autologin and encryption by default; a new <tt class=
          "OPTION">-y</tt> option turns off encryption.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=telnet&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">telnet</span>(1)</span></a> now supports
          a <tt class="OPTION">-u</tt> flag to allow connections to
          UNIX-domain (<tt class="LITERAL">AF_UNIX</tt>) sockets.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tftpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tftpd</span>(8)</span></a> now takes the
          <tt class="OPTION">-c</tt> and <tt class="OPTION">-C</tt>
          options, which allow the server to <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=chroot&sektion=2&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">chroot</span>(2)</span></a> based on the
          IP address of the connecting client. <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tftp&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tftp</span>(1)</span></a> and <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tftpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tftpd</span>(8)</span></a> can now
          transfer files larger than 65535 blocks. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tftpd&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tftpd</span>(8)</span></a> now supports
          RFC 2349 (TFTP Timeout Interval and Transfer Size
          Options); this feature is required by some firmware like
          EFI boot managers (at least on HP i2000 Itanium servers)
          in order to boot an image using <b class=
          "APPLICATION">TFTP</b>.</p>

          <p>A version of Transport Independent RPC (<b class=
          "APPLICATION">TI-RPC</b>) has been imported.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tmpnam&sektion=3&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tmpnam</span>(3)</span></a> will now use
          the <tt class="ENVAR">TMPDIR</tt> environment variable,
          if set, to specify the location of temporary files.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=tip&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">tip</span>(1)</span></a> has been updated
          from <b class="APPLICATION">OpenBSD</b>, and has the
          ability to act as a <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=cu&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">cu</span>(1)</span></a> substitute.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=top&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">top</span>(1)</span></a> will now use the
          full width of its tty.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=touch&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">touch</span>(1)</span></a> now takes a
          <tt class="OPTION">-h</tt> option to operate on a
          symbolic link, rather than what the link points to.</p>

          <p>The <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=truncate&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">truncate</span>(1)</span></a> utility,
          which truncates or extends the length of files, has been
          added. [MERGED]</p>

          <p>Ukrainian language support has been added to the
          FreeBSD console. [MERGED]</p>

          <p><b class="APPLICATION">UUCP</b> has been removed from
          the base system. It can be found in the Ports Collection,
          in <a href=
          "http://www.FreeBSD.org/cgi/url.cgi?ports/net/freebsd-uucp/pkg-descr">
          <tt class="FILENAME">net/freebsd-uucp</tt></a>.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=units&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">units</span>(1)</span></a> has received
          some updates and bugfixes. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=usbdevs&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">usbdevs</span>(8)</span></a> now supports
          a <tt class="OPTION">-d</tt> flag to show the device
          driver associated with each device.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=uudecode&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">uudecode</span>(1)</span></a> now accepts
          a <tt class="OPTION">-o</tt> option to set its output
          file.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=vidcontrol&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">vidcontrol</span>(1)</span></a> now
          accepts a <tt class="OPTION">-g</tt> parameter to select
          custom text geometry in the <tt class=
          "LITERAL">VESA_800x600</tt> raster text mode.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=vidcontrol&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">vidcontrol</span>(1)</span></a> now
          allows the user to omit the font size specification when
          loading a font, and has some better error-handling.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=vidcontrol&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">vidcontrol</span>(1)</span></a> now
          supports a <tt class="OPTION">-p</tt> option to take a
          snapshot of a <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=syscons&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">syscons</span>(4)</span></a> video
          buffer. These snapshots can be manipulated by the <a
          href=
          "http://www.FreeBSD.org/cgi/url.cgi?ports/graphics/scr2png/pkg-descr">
          <tt class="FILENAME">graphics/scr2png</tt></a> utility in
          the Ports Collection. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=vidcontrol&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">vidcontrol</span>(1)</span></a> now
          supports a <tt class="OPTION">-C</tt> option to clear the
          history buffer for a given tty, as well as a <tt class=
          "OPTION">-h</tt> option to set the size of the history
          buffer. [MERGED]</p>

          <p>The default stripe size in <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=vinum&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">vinum</span>(8)</span></a> has been
          changed from 256KB to 279KB, to spread out superblocks
          more evenly between stripes.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=wall&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">wall</span>(1)</span></a> now supports a
          <tt class="OPTION">-g</tt> flag to write a message to all
          users of a given group. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=watch&sektion=8&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">watch</span>(8)</span></a> now takes a
          <tt class="OPTION">-f</tt> option to specify a <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=snp&sektion=4&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">snp</span>(4)</span></a> device to use.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=which&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">which</span>(1)</span></a> is now a C
          program, rather than a Perl script.</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=whois&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">whois</span>(1)</span></a> now directs
          queries for IP addresses to ARIN. If a query to ARIN
          references APNIC or RIPE, the appropriate server will
          also be queried, provided that the <tt class=
          "OPTION">-Q</tt> option is not specified. [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=whois&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">whois</span>(1)</span></a> supports a <tt
          class="OPTION">-c</tt> option to specify a country code
          to help direct queries towards a particular whois server.
          [MERGED]</p>

          <p><a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=xargs&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">xargs</span>(1)</span></a> now supports a
          <tt class="OPTION">-J</tt> <tt class=
          "REPLACEABLE"><i>replstr</i></tt> option that allows the
          user to tell <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=xargs&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">xargs</span>(1)</span></a> to insert the
          data read from standard input at a specific point in the
          command line arguments rather than at the end.
          [MERGED]</p>

          <p>The compiler chain now uses the FSF-supplied C/C++
          runtime initialization code. This change brings about
          better compatibility with code generated from the various
          egcs and gcc ports, as well as the stock public FSF
          source. [MERGED]</p>

          <p>The threads library has gained some signal handling
          changes, bug fixes, and performance enhancements
          (including zero system call thread switching). <a href=
          "http://www.FreeBSD.org/cgi/man.cgi?query=gdb&sektion=1&manpath=FreeBSD+5.0-current">
          <span class="CITEREFENTRY"><span class=
          "REFENTRYTITLE">gdb</span>(1)</span></a> thread support
          has been updated to match these changes. [MERGED]</p>

          <p>Significant additions have been made to
          internationalization support; FreeBSD now has complete
          locale support for the <tt class=
          "LITERAL">LC_MONETARY</tt>, <tt class=
          "LITERAL">LC_NUMERIC</tt>, and <tt class=
          "LITERAL">LC_MESSAGES</tt> categories. A number of
          applications have been updated to take advantage of this
          support.</p>

          <p>Locale names have been changed to improve
          compatibility with the names used by X11R6, as well as a
          number of other UNIX versions. As an example, the <tt
          class="LITERAL">en_US.ISO_8859-1</tt> locale name has
          been changed to <tt class="LITERAL">en_US.ISO8859-1</tt>.
          Entries in <tt class="FILENAME">/etc/locale.alias</tt>
          provide backward compatibility. [MERGED]</p>

          <p><tt class=
          "FILENAME">/usr/src/share/examples/BSD_daemon/</tt> now
          contains a scalable Beastie graphic. [MERGED]</p>

          <p>As part of an ongoing process, many manual pages were
          improved, both in terms of their formatting markup and in
          their content. [MERGED]</p>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN2627">2.3.1 Contributed
            Software</a></h3>

            <p><b class="APPLICATION">am-utils</b> has been updated
            to 6.0.7.</p>

            <p><b class="APPLICATION">awk</b> from Bell Labs
            (variously known as ``BWK awk'' or ``The One True
            AWK'') has been imported. It is available as <tt class=
            "COMMAND">awk</tt> on the sparc64 architecture, and <tt
            class="COMMAND">nawk</tt> on other architectures.</p>

            <p><b class="APPLICATION">bc</b> has been updated from
            1.04 to 1.06. [MERGED]</p>

            <p>The ISC library from the <b class=
            "APPLICATION">BIND</b> distribution is now built as <tt
            class="FILENAME">libisc</tt>. [MERGED]</p>

            <p><b class="APPLICATION">BIND</b> is now built with
            the <tt class="LITERAL">NOADDITIONAL</tt> flag, which
            causes <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=named&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">named</span>(8)</span></a> to operate
            in a more consistent fashion for certain common
            misconfigurations. [MERGED]</p>

            <p><b class="APPLICATION">BIND</b> has been updated to
            8.3.1-REL. [MERGED]</p>

            <p><b class="APPLICATION">Binutils</b> has been updated
            to 2.12.0.</p>

            <p><b class="APPLICATION">bzip2</b> 1.0.2 has been
            imported; this brings the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=bzip2&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">bzip2</span>(1)</span></a> program and
            the <tt class="FILENAME">libbz2</tt> library to the
            base system. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ee&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ee</span>(1)</span></a> <b class=
            "APPLICATION">Easy Editor</b> has been updated to
            1.4.2. [MERGED]</p>

            <p><b class="APPLICATION">file</b> has been updated to
            3.37.</p>

            <p><b class="APPLICATION">gcc</b> has been updated to
            2.95.3. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=gcc&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">gcc</span>(1)</span></a> now uses a
            unified <tt class="FILENAME">libgcc</tt> rather than a
            separate one for threaded and non-threaded programs.
            <tt class="FILENAME">/usr/lib/libgcc_r.a</tt> can be
            removed. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=gcc&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">gcc</span>(1)</span></a> now supports
            the environment variable <tt class=
            "ENVAR">GCC_OPTIONS</tt>, which can hold a set of
            default options for <b class="APPLICATION">GCC</b>.
            [MERGED]</p>

            <p><b class="APPLICATION">GNATS</b> has been updated to
            3.113. [MERGED]</p>

            <p><b class="APPLICATION">GNU awk</b> has been updated
            to 3.1.0. It is available as <tt class=
            "COMMAND">gawk</tt> on the sparc64 architecture, and as
            <tt class="COMMAND">awk</tt> on other
            architectures.</p>

            <p><b class="APPLICATION">gperf</b> has been updated to
            2.7.2.</p>

            <p><b class="APPLICATION">groff</b> and its related
            utilities have been updated to FSF version 1.17.2. This
            import brings in a new <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=mdoc&sektion=7&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">mdoc</span>(7)</span></a> macro package
            (sometimes referred to as <tt class=
            "LITERAL">mdocNG</tt>), which removes many of the
            limitations of its predecessor. [MERGED]</p>

            <p><b class="APPLICATION">Heimdal</b> has been updated
            to 0.3f.</p>

            <p>The version of <b class="APPLICATION">IPFilter</b>
            provided with FreeBSD now includes the <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ipfs&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ipfs</span>(8)</span></a> program,
            which allows state information created for NAT entries
            and stateful rules to be saved to disk and restored
            after a reboot. Boot-time configuration of these
            features is supported by <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=rc.conf&sektion=5&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">rc.conf</span>(5)</span></a>.
            [MERGED]</p>

            <p>The <b class="APPLICATION">ISC DHCP</b> client has
            been updated to 3.0.1RC6.</p>

            <p><b class="APPLICATION">Kerberos IV</b> has been
            updated to 1.0.5. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=more&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">more</span>(1)</span></a> command has
            been replaced by <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=less&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">less</span>(1)</span></a>, although it
            can still be run as <tt class="COMMAND">more</tt>.
            [MERGED] Version 371 of <b class="APPLICATION">less</b>
            has been imported.</p>

            <p><b class="APPLICATION">libpcap</b> has been updated
            to 0.6.2. [MERGED]</p>

            <p><b class="APPLICATION">libreadline</b> has been
            updated to 4.2.</p>

            <p><b class="APPLICATION">libz</b> has been updated to
            1.1.4.</p>

            <p><b class="APPLICATION">lint</b> has been updated to
            snapshot of NetBSD <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=lint&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">lint</span>(1)</span></a> as of 3 March
            2002.</p>

            <p><b class="APPLICATION">lukemftp</b> (the FTP client
            from NetBSD) has replaced the FreeBSD <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=ftp&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">ftp</span>(1)</span></a> program. Among
            its new features are more automation methods, better
            standards compliance, transfer rate throttling, and a
            customizable command-line prompt. Some environment
            variables and command-line arguments have changed.</p>

            <p>The FTP daemon from NetBSD, otherwise known as <b
            class="APPLICATION">lukemftpd</b>, has been imported
            and is available as <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=lukemftpd&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">lukemftpd</span>(8)</span></a>.</p>

            <p><b class="APPLICATION">ncurses</b> has been updated
            to 5.2-20010512.</p>

            <p>The <b class="APPLICATION">NTP</b> suite of programs
            has been updated to 4.1.0. [MERGED]</p>

            <p><b class="APPLICATION">OpenPAM</b> (``Centaury''
            release) has been imported, replacing <b class=
            "APPLICATION">Linux-PAM</b>.</p>

            <p>The <b class="APPLICATION">OPIE</b>
            one-time-password suite has been updated to 2.32.
            [MERGED] It has completely replaced the functionality
            of <b class="APPLICATION">S/Key</b>.</p>

            <p><b class="APPLICATION">Perl</b> has been updated to
            version 5.6.0.</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=routed&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">routed</span>(8)</span></a> has been
            updated to version 2.22. [MERGED]</p>

            <p>Version 1.4.3 of the <b class=
            "APPLICATION">smbfs</b> userland utilities have been
            imported. [MERGED]</p>

            <p><b class="APPLICATION">tcpdump</b> has been updated
            to 3.6.3. [MERGED]</p>

            <p>The <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=csh&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">csh</span>(1)</span></a> shell has been
            replaced by <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=tcsh&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">tcsh</span>(1)</span></a>, although it
            can still be run as <tt class="COMMAND">csh</tt>. <b
            class="APPLICATION">tcsh</b> has been updated to
            version 6.11. [MERGED]</p>

            <p>The contributed version of <b class=
            "APPLICATION">tcp_wrappers</b> now includes the <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=tcpd&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">tcpd</span>(8)</span></a> helper
            daemon. While not strictly necessary in a standard
            FreeBSD installation (because <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=inetd&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">inetd</span>(8)</span></a> already
            incorporates this functionality), this may be useful
            for <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=inetd&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">inetd</span>(8)</span></a> replacements
            such as <b class="APPLICATION">xinetd</b>.</p>

            <p><b class="APPLICATION">top</b> has been updated to
            version 3.5b12.</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=traceroute&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">traceroute</span>(8)</span></a> now
            takes its default maximum TTL value from the <tt class=
            "VARNAME">net.inet.ip.ttl</tt> sysctl variable.
            [MERGED]</p>

            <p>The timezone database has been updated to the <tt
            class="FILENAME">tzdata2001d</tt> release. [MERGED]</p>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="AEN2788">2.3.1.1
              CVS</a></h4>

              <p><b class="APPLICATION">cvs</b> has been updated to
              1.11.1p1. [MERGED]</p>

              <p>The default value for <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=cvs&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">cvs</span>(1)</span></a>'s <tt class=
              "ENVAR">CVS_RSH</tt> variable is now <tt class=
              "LITERAL">ssh</tt>, rather than <tt class=
              "LITERAL">rsh</tt>. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=cvs&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">cvs</span>(1)</span></a> now supports
              a <tt class="OPTION">-T</tt> option to update a
              sandbox's <tt class="FILENAME">CVS/Template</tt> file
              from the repository. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=cvs&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">cvs</span>(1)</span></a> <tt class=
              "LITERAL">diff</tt> now supports the <tt class=
              "OPTION">-j</tt> option to perform differences
              against a revision relative to a branch tag.
              [MERGED]</p>
            </div>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="AEN2811">2.3.1.2
              CVSup</a></h4>

              <p><b class="APPLICATION">CVSup</b>, a frequently
              used utility in the FreeBSD Ports Collection, was
              formerly installable using several ports and
              packages. The <a href=
              "http://www.FreeBSD.org/cgi/url.cgi?ports/net/cvsup-bin/pkg-descr">
              <tt class="FILENAME">net/cvsup-bin</tt></a> and <a
              href=
              "http://www.FreeBSD.org/cgi/url.cgi?ports/net/cvsupd-bin/pkg-descr">
              <tt class="FILENAME">net/cvsupd-bin</tt></a>
              ports/packages are no longer necessary or available;
              the <a href=
              "http://www.FreeBSD.org/cgi/url.cgi?ports/net/cvsup/pkg-descr">
              <tt class="FILENAME">net/cvsup</tt></a> port should
              be used instead. [MERGED]</p>

              <p><b class="APPLICATION">CVSup</b> has been updated
              to 16.1_3, which is available in the FreeBSD Ports
              Collection as <a href=
              "http://www.FreeBSD.org/cgi/url.cgi?ports/net/cvsup/pkg-descr">
              <tt class="FILENAME">net/cvsup</tt></a>. This update
              fixes a long-standing (but only recently encountered)
              bug which affects the timestamps on all files after
              Sun Sep 9 01:46:40 UTC 2001 (1,000,000,000 seconds
              after the UNIX epoch). [MERGED]</p>
            </div>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="KAME-USERLAND">2.3.1.3
              KAME</a></h4>

              <p>The IPv6 stack is now based on a snapshot based on
              the KAME Project's IPv6 snapshot as of 28 May, 2001.
              Most of the items listed in this section are a result
              of this import. <a href="#KAME-KERNEL">Section
              2.1.9.3</a> lists kernel updates to the KAME IPv6
              stack. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=faithd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">faithd</span>(8)</span></a> now
              supports a configuration file for access control.
              [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ifconfig</span>(8)</span></a> can now
              perform the functions of <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=gifconfig&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">gifconfig</span>(8)</span></a>.
              [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ifconfig&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ifconfig</span>(8)</span></a> can now
              perform the functions of <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=prefix&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">prefix</span>(8)</span></a>. <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=prefix&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">prefix</span>(8)</span></a> is now a
              shell script for partial backwards compatibility.
              [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ndp&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ndp</span>(8)</span></a> now
              implements garbage collection for stale NDP entries,
              as described in RFC 2461 (Neighbor Discovery for IP
              Version 6 (IPv6)). [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=pim6dd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">pim6dd</span>(8)</span></a> and <a
              href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=pim6sd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">pim6sd</span>(8)</span></a> have been
              removed due to restrictive licensing conditions.
              These programs are available in the ports collection
              as <a href=
              "http://www.FreeBSD.org/cgi/url.cgi?ports/net/pim6dd/pkg-descr">
              <tt class="FILENAME">net/pim6dd</tt></a> and <a href=
              "http://www.FreeBSD.org/cgi/url.cgi?ports/net/pim6sd/pkg-descr">
              <tt class="FILENAME">net/pim6sd</tt></a>.
              [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=route6d&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">route6d</span>(8)</span></a> now
              supports an <tt class="OPTION">-n</tt> flag to avoid
              updating the kernel forwarding table. [MERGED]</p>

              <p>The <tt class="OPTION">-R</tt> (router
              renumbering) option to <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=rtadvd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">rtadvd</span>(8)</span></a> is
              currently ignored. [MERGED]</p>
            </div>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="AEN2869">2.3.1.4
              OpenSSH</a></h4>

              <p><b class="APPLICATION">OpenSSH</b> has been
              updated to 2.9, which provides support for the SSH2
              protocol (now the default) and DSA keys. <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ssh-add&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ssh-add</span>(1)</span></a> and <a
              href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ssh-agent&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ssh-agent</span>(1)</span></a> can
              now handle DSA keys, with support for authentication
              forwarding. <b class="APPLICATION">OpenSSH</b> users
              in the USA no longer need to rely on the
              restrictively-licensed RSAREF toolkit which is
              required to handle RSA keys. Among other new
              features: A client and server for sftp has been
              added. <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=scp&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">scp</span>(1)</span></a> can now
              handle files larger than 2 GBytes. A limit on the
              number of outstanding, unauthenticated connections in
              <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=sshd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">sshd</span>(8)</span></a> has been
              added. Support has been added for the Rijndael
              encryption algorithm. Rekeying of existing sessions
              is now supported, and an experimental <b class=
              "APPLICATION">SOCKS4</b> proxy has been added to <a
              href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=ssh&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">ssh</span>(1)</span></a>.</p>

              <p><b class="APPLICATION">OpenSSH</b> can now
              authenticate using OPIE passwords in SSH1 mode.
              Support is not yet available in SSH2 mode.
              [MERGED]</p>

              <p><b class="APPLICATION">PAM</b> support for <b
              class="APPLICATION">OpenSSH</b> has been added.</p>

              <p>A long-standing bug in <b class=
              "APPLICATION">OpenSSH</b>, which sometimes resulted
              in a dropped session when an X11-forwarded client was
              closed, was fixed.</p>

              <p><b class="APPLICATION">Kerberos</b> compatibility
              has been added to <b class="APPLICATION">OpenSSH</b>.
              [MERGED]</p>

              <p><b class="APPLICATION">OpenSSH</b> has been
              modified to be more resistant to traffic analysis by
              requiring that ``non-echoed'' characters are still
              echoed back in a null packet, as well as by padding
              passwords sent so as not to hint at password lengths.
              [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=sshd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">sshd</span>(8)</span></a> is now
              enabled by default on new installs. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=sshd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">sshd</span>(8)</span></a> <tt class=
              "LITERAL">X11Forwarding</tt> is now turned on by
              default on the server (any risk is to the client,
              where it is already disabled by default).
              [MERGED]</p>

              <p>In <tt class="FILENAME">/etc/ssh/sshd_config</tt>,
              the <tt class="LITERAL">ConnectionsPerPeriod</tt>
              parameter has been deprecated in favor of <tt class=
              "LITERAL">MaxStartups</tt>. [MERGED]</p>

              <p><b class="APPLICATION">OpenSSH</b> now has a <tt
              class="LITERAL">VersionAddendum</tt> configuration
              setting for <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=sshd&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">sshd</span>(8)</span></a> to allow
              changing the part of the <b class=
              "APPLICATION">OpenSSH</b> version string after the
              main version number.</p>
            </div>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="AEN2923">2.3.1.5
              OpenSSL</a></h4>

              <p><b class="APPLICATION">OpenSSL</b> has been
              updated to 0.9.6c.</p>

              <p><b class="APPLICATION">OpenSSL</b> now has support
              for machine-dependent ASM optimizations, activated by
              the new <tt class="VARNAME">MACHINE_CPU</tt> and/or
              <tt class="VARNAME">CPUTYPE</tt> <tt class=
              "FILENAME">make.conf</tt> variables. [MERGED]</p>
            </div>

            <div class="SECT4">
              <hr>

              <h4 class="SECT4"><a name="AEN2932">2.3.1.6
              sendmail</a></h4>

              <p><b class="APPLICATION">sendmail</b> has been
              updated from version 8.9.3 to version 8.12.2.
              Important changes include: <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=sendmail&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">sendmail</span>(8)</span></a> is no
              longer installed as a set-user-ID root binary (now
              set-group-ID smmsp); new default file locations (see
              <tt class=
              "FILENAME">/usr/src/contrib/sendmail/cf/README</tt>);
              <a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=newaliases&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">newaliases</span>(1)</span></a> is
              limited to <tt class="USERNAME">root</tt> and trusted
              users; STARTTLS encryption; and the MSA port (587) is
              turned on by default. See <tt class=
              "FILENAME">/usr/src/contrib/sendmail/RELEASE_NOTES</tt>
              for more information. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=mail.local&sektion=8&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">mail.local</span>(8)</span></a> is no
              longer installed as a set-user-ID binary. If you are
              using a <tt class=
              "FILENAME">/etc/mail/sendmail.cf</tt> from the
              default <tt class="FILENAME">sendmail.cf</tt>
              included with FreeBSD any time after 3.1.0, you are
              fine. If you are using a hand-configured <tt class=
              "FILENAME">sendmail.cf</tt> and <tt class=
              "COMMAND">mail.local</tt> for delivery, check to make
              sure the <tt class="LITERAL">F=S</tt> flag is set on
              the <tt class="LITERAL">Mlocal</tt> line. Those with
              <tt class="FILENAME">.mc</tt> files who need to add
              the flag can do so by adding the following line to
              their <tt class="FILENAME">.mc</tt> file and
              regenerating the <tt class=
              "FILENAME">sendmail.cf</tt> file:</p>
<pre class="PROGRAMLISTING">
    MODIFY_MAILER_FLAGS(`LOCAL',`+S')dnl
</pre>

              <p>Note that <tt class=
              "LITERAL">FEATURE(`local_lmtp')</tt> already does
              this. [MERGED]</p>

              <p>The default <tt class=
              "FILENAME">/etc/mail/sendmail.cf</tt> disables the
              SMTP <tt class="LITERAL">EXPN</tt> and <tt class=
              "LITERAL">VRFY</tt> commands. [MERGED]</p>

              <p><a href=
              "http://www.FreeBSD.org/cgi/man.cgi?query=vacation&sektion=1&manpath=FreeBSD+5.0-current">
              <span class="CITEREFENTRY"><span class=
              "REFENTRYTITLE">vacation</span>(1)</span></a> has
              been updated to use the version included with <b
              class="APPLICATION">sendmail</b>. [MERGED]</p>

              <p>The <b class="APPLICATION">sendmail</b>
              configuration building tools are installed in <tt
              class="FILENAME">/usr/share/sendmail/cf/</tt>.
              [MERGED]</p>

              <p>New <tt class="FILENAME">make.conf</tt> options:
              <tt class="VARNAME">SENDMAIL_MC</tt> and <tt class=
              "VARNAME">SENDMAIL_ADDITIONAL_MC</tt>. See <tt class=
              "FILENAME">/usr/share/examples/etc/make.conf</tt> for
              more information. [MERGED]</p>

              <p><tt class="FILENAME">/etc/mail/Makefile</tt> now
              supports: the new <tt class=
              "VARNAME">SENDMAIL_MC</tt> <tt class=
              "FILENAME">make.conf</tt> option; the ability to
              build <tt class="FILENAME">.cf</tt> files from <tt
              class="FILENAME">.mc</tt> files; generalized map
              rebuilding; rebuilding the aliases file; and the
              ability to stop, start, and restart <b class=
              "APPLICATION">sendmail</b>. [MERGED]</p>

              <p>The <tt class="USERNAME">smmsp</tt> and <tt class=
              "USERNAME">mailnull</tt> users have been added to <tt
              class="FILENAME">/etc/master.passwd</tt>. In the
              absence of a <tt class="LITERAL">confDEF_USER_ID</tt>
              setting, by default, <b class=
              "APPLICATION">sendmail</b> will use the <tt class=
              "USERNAME">mailnull</tt> user for extra security.
              Previously, if the <tt class="USERNAME">mailnull</tt>
              user did not exist, the <tt class=
              "USERNAME">daemon</tt> user was used. This change may
              generate some permissions issues when mailing to
              files or to programs (such as <a href=
              "http://www.FreeBSD.org/cgi/url.cgi?ports/mail/majordomo/pkg-descr">
              <tt class="FILENAME">mail/majordomo</tt></a>).
              [MERGED] The previous behavior can be restored by
              adding the following line to a system's <tt class=
              "FILENAME"><tt class=
              "REPLACEABLE"><i>*</i></tt>.mc</tt> configuration
              file:</p>
<pre class="PROGRAMLISTING">
    define(`confDEF_USER_ID', `daemon')
</pre>
              <br>
              <br>
            </div>
          </div>

          <div class="SECT3">
            <hr>

            <h3 class="SECT3"><a name="AEN2998">2.3.2
            Ports/Packages Collection</a></h3>

            <p><b class="APPLICATION">BSDPAN</b>, a collection of
            modules that provides tighter integration of <b class=
            "APPLICATION">Perl</b> into the FreeBSD Ports
            Collection, has been added.</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_create&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_create</span>(1)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_add&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_add</span>(1)</span></a> can now
            work with packages that have been compressed using <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=bzip2&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">bzip2</span>(1)</span></a>. <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_add&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_add</span>(1)</span></a> will use
            the PACKAGEROOT environment variable to determine a
            mirror site for new packages. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_create&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_create</span>(1)</span></a> now
            records dependencies in dependency order rather than in
            the order specified on the command line. This improves
            the functioning of <tt class="COMMAND">pkg_add -r</tt>.
            [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_create&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_create</span>(1)</span></a> now
            supports a <tt class="OPTION">-b</tt> to create a
            package file from a locally-installed package.
            [MERGED]</p>

            <p>When requested to delete multiple packages, <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_delete&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_delete</span>(1)</span></a> will
            now attempt to remove them in dependency order rather
            than the order specified on the command line.
            [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_delete&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_delete</span>(1)</span></a> now can
            perform glob/regexp matching of package names. In
            addition, it supports a <tt class="OPTION">-a</tt>
            option for removing all packages and a <tt class=
            "OPTION">-i</tt> option for <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=rm&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">rm</span>(1)</span></a>-style
            interactive confirmation. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_delete&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_delete</span>(1)</span></a> now
            supports a <tt class="OPTION">-r</tt> option for
            recursive package removal. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_info&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_info</span>(1)</span></a> now
            supports globbing against names of installed packages.
            The <tt class="OPTION">-G</tt> option disables this
            behavior, and the <tt class="OPTION">-x</tt> option
            causes regular expression matching instead of shell
            globbing. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_info&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_info</span>(1)</span></a> can now
            accept a <tt class="OPTION">-g</tt> flag for verifying
            an installed package against its recorded checksums (to
            see if it's been modified post-installation).
            Naturally, this mechanism is only as secure as the
            contents of <tt class="FILENAME">/var/db/pkg</tt> if
            it's to be used for auditing purposes. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_sign&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_sign</span>(1)</span></a> and <a
            href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_check&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_check</span>(1)</span></a> have
            been added to digitally sign and verify the signatures
            on binary package files. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_update&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_update</span>(1)</span></a>, a
            utility to update installed packages and update their
            dependencies, has been added. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_version&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_version</span>(1)</span></a> now
            has a version number comparison routine that
            corresponds to the Porters Handbook. It also has a <tt
            class="OPTION">-t</tt> option for testing address
            comparisons. [MERGED]</p>

            <p><a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_version&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_version</span>(1)</span></a> now
            takes a <tt class="OPTION">-s</tt> flag to limit its
            operation to ports/packages matching a given string.
            [MERGED]</p>

            <p>Version numbers of installed packages have a new
            (backward-compatible) syntax, which supports the <tt
            class="VARNAME">PORTREVISION</tt> and <tt class=
            "VARNAME">PORTEPOCH</tt> variables in Ports Collection
            <tt class="FILENAME">Makefile</tt>s. These changes help
            keep track of changes in the ports collection entries
            such as security patches or FreeBSD-specific updates,
            which aren't reflected in the original, third-party
            software distributions. <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_version&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_version</span>(1)</span></a> can
            now compare these new-style version numbers.
            [MERGED]</p>

            <p>To improve performance and disk utilization, the
            ``ports skeletons'' in the FreeBSD Ports Collection
            have been restructured. Installed ports and packages
            should not be affected. [MERGED]</p>

            <p>All packages and ports now contain an ``origin''
            directive, which makes it easier for programs such as
            <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=pkg_version&sektion=1&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">pkg_version</span>(1)</span></a> to
            determine the directory from which a package was built.
            [MERGED]</p>
          </div>
        </div>
      </div>

      <div class="SECT1">
        <hr>

        <h1 class="SECT1"><a name="AEN3091">3 Upgrading from
        previous releases of FreeBSD</a></h1>

        <p>If you're upgrading from a previous release of FreeBSD,
        you generally will have three options:</p>

        <ul>
          <li>
            <p>Using the binary upgrade option of <a href=
            "http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+5.0-current">
            <span class="CITEREFENTRY"><span class=
            "REFENTRYTITLE">sysinstall</span>(8)</span></a>. This
            option is perhaps the quickest, although it presumes
            that your installation of FreeBSD uses no special
            compilation options.</p>
          </li>

          <li>
            <p>Performing a complete reinstall of FreeBSD.
            Technically, this is not an upgrading method, and in
            any case is usually less convenient than a binary
            upgrade, in that it requires you to manually backup and
            restore the contents of <tt class="FILENAME">/etc</tt>.
            However, it may be useful in cases where you want (or
            need) to change the partitioning of your disks.</p>
          </li>

          <li>
            <p>From source code in <tt class=
            "FILENAME">/usr/src</tt>. This route is more flexible,
            but requires more disk space, time, and more technical
            expertise. Upgrading from very old versions of FreeBSD
            may be problematic; in cases like this, it is usually
            more effective to perform a binary upgrade or a
            complete reinstall.</p>
          </li>
        </ul>
        <br>
        <br>

        <p>Please read the <tt class="FILENAME">INSTALL.TXT</tt>
        file for more information, preferably <span class=
        "emphasis"><i class="EMPHASIS">before</i></span> beginning
        an upgrade. If you are upgrading from source, please be
        sure to read <tt class="FILENAME">/usr/src/UPDATING</tt> as
        well.</p>

        <p>Finally, if you want to use one of various means to
        track the -STABLE or -CURRENT branches of FreeBSD, please
        be sure to consult the <a href=
        "http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/current-stable.html"
        target="_top">``-CURRENT vs. -STABLE''</a> section of the
        <a href="http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/" target=
        "_top">FreeBSD Handbook</a>.</p>

        <div class="IMPORTANT">
          <blockquote class="IMPORTANT">
            <p><b>Important:</b> Upgrading FreeBSD should, of
            course, only be attempted after backing up <span class=
            "emphasis"><i class="EMPHASIS">all</i></span> data and
            configuration files.</p>
          </blockquote>
        </div>
      </div>
    </div>
    <hr>

    <p align="center"><small>This file, and other release-related
    documents, can be downloaded from <a href=
    "ftp://current.FreeBSD.org/pub/FreeBSD/">ftp://current.FreeBSD.org/pub/FreeBSD/</a>.</small></p>

    <p align="center"><small>For questions about FreeBSD, read the
    <a href="http://www.FreeBSD.org/docs.html">documentation</a>
    before contacting &#60;<a href=
    "mailto:questions@FreeBSD.org">questions@FreeBSD.org</a>&#62;.</small></p>

    <p align="center"><small><small>All users of FreeBSD 5-CURRENT
    should subscribe to the &#60;<a href=
    "mailto:current@FreeBSD.org">current@FreeBSD.org</a>&#62;
    mailing list.</small></small></p>

    <p align="center">For questions about this documentation,
    e-mail &#60;<a href=
    "mailto:doc@FreeBSD.org">doc@FreeBSD.org</a>&#62;.</p>
    <br>
    <br>
  </body>
</html>

